Mrsilaz vulnerabilities

1 vulnerability

Known vulnerabilities in Mrsilaz products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
RoutineCVE-2026-4208typo3 · extension "e-mail mfa provider" +1 moreAuthentication Bypass in extension "E-Mail MFA Provider" (mfa_email)The extension fails to properly reset the generated MFA code after successful authentication. This leads to a possible MFA bypass for future login attempts by providing an empty string as MFA code to the extensions MFA provider.CVSS8.8HighEPSS0.27%