CVE-2026-77133 in femanagerinformación

Resumen

por MITRE • 2026-08-25

The extension fails to restrict which frontend usergroups a logged-in user may assign to their own account when the profile edit plugin uses its default field configuration, allowing self-service privilege escalation into arbitrary frontend groups.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

TYPO3

Reservar

2026-08-20

Divulgación

2026-08-25

Moderación

aceptado

Artículo

VDB-394986

CPE

listo

EPSS

0.00207

KEV

no

Actividades

muy bajo

Sector

Hostingprovider, Lawfirm, ...

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-77133
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-77133
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-77133/

◂ AnteriorVisión De ConjuntoPróximo ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!