TYPO3-EXT-SA-2026-037: Broken Access Control in extension "Mail" (mail)

PKSA-833v-cnnh-wds7 CVE-2026-120330

Affected package: mediaessenz/mail

Affected version: >=4.0.0,<4.2.0|<3.12.5

Reported by:
FriendsOfPHP/security-advisories