CVE-2026-77138 | TYPO3 HTML5 Video Player vs. Powermail Plugin up to 0.2.1 unserialize cookie deserialization

A vulnerability classified as critical was found in TYPO3 HTML5 Video Player vs. Powermail Plugin up to 0.2.1. This affects the function unserialize. The manipulation of the argument cookie results in deserialization.

This vulnerability was named CVE-2026-77138. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More