{"id":"CVE-2026-120328","published":"2026-11-03T10:17:17.527","lastModified":"2026-11-03T19:17:57.357","description":"The click tracking middleware does not validate the authentication code of a recipient if the code is omitted. Unauthenticated attackers can retrieve personal data of newsletter recipients, which is inserted into links of sent mails.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-639"],"vendors":[],"products":[],"references":[{"url":"https://typo3.org/security/advisory/typo3-ext-sa-2026-037","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}