CVE-2026-77130: TYPO3 Extension Syssy - TYPO3 Monitoring & Security Checks

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The extension fails to properly validate the expiration of a client-supplied JWT token, allowing an attacker in control of a valid API key to authenticate with an expired token. Exploitation requires the attacker to already be in control of the SYSSY project's API key.

Affected products

• TYPO3 Extension Syssy - TYPO3 Monitoring & Security Checks: before 3.0.6 (fixed in 3.0.6)

Published 2026-08-25. Last modified 2026-08-26.