TYPO3-EXT-SA-2026-037: Broken Access Control in extension "Mail" (mail)

PKSA-p6j1-yhwr-yntb CVE-2026-120329

Affected package: mediaessenz/mail

Affected version: >=4.0.0,<4.2.0|<3.12.5

Reported by:
FriendsOfPHP/security-advisories