Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The extension fails to properly define allowed classes used when deserializing transport failure metadata. An attacker may exploit this to execute untrusted serialized code. Note that an active exploit requires write access to the directory configured at $GLOBALS['TYPO3_CONF_VARS']['MAIL']['transport_spool_filepath'].
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-1323 The extension fails to properly define allowed classes used when deserializing transport failure metadata. An attacker may exploit this to execute untrusted serialized … https://www.cve.org/CVERecord?id=CVE-2026-1323
Post summary
The statement outlines a deserialization flaw in the CVE-2026-1323 extension that could allow execution of untrusted code, but offers no details on PoC, tools, exploitation, or patches.
⚡ New CVE Alert: CVE-2026-1323 📊 Severity: 5.2 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-1323 #CVE-2026-1323 #CVE #Medium #CyberSecurity #InfoSec https://t.co/A9Y9xuYZqv
Post summary
A new CVE-2026-1323 with medium severity affecting multiple unspecified products has been announced, but no technical details, exploitation evidence, or mitigation guidance are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | cps-it | mailqueue | - | typo3 | - |