5.2

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-0895

CVE-2026-0895: mailqueue TYPO3 extension affected by Insecure Deserialization

Description

The extension extends TYPO3’s FileSpool component, which was vulnerable to Insecure Deserialization prior to TYPO3-CORE-SA-2026-004. Since the related fix is overwritten by the extension, using the extension with a patched TYPO3 core version still allows for Insecure Deserialization, because the affected vulnerable code was extracted from TYPO3 core to the extension.

More information about this vulnerability can be found in the related TYPO3 Core Security Advisory TYPO3-CORE-SA-2026-004.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-0895

CVE-2026-0895:

5.2

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
cpsit/typo3-mailqueue	composer	< 0.4.3	0.4.3
cpsit/typo3-mailqueue	composer	>= 0.5.0, < 0.5.1	0.5.1

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is an insecure deserialization issue in the mailqueue TYPO3 extension. The provided patches (12a0a35027bb5609917790a94e43bbf117abf733 and fd09aa4e1a751551bae4b228bee814e22f2048db) clearly show the fix. The vulnerability existed in the restoreItem method of the QueueableFileTransport class, located in Classes/Mail/Transport/QueueableFileTransport.php. The patch replaces a call to the dangerous unserialize() function with a safer deserialization method using PolymorphicDeserializer. The use of unserialize() on user-controllable data is the root cause of the vulnerability, as it can allow an attacker to instantiate arbitrary objects, leading to code execution. The function QueueableFileTransport::restoreItem is the precise location where the vulnerability could be triggered.

Vulnerable functions

QueueableFileTransport::restoreItem

Classes/Mail/Transport/QueueableFileTransport.php

The `restoreItem` function in the `QueueableFileTransport` class deserializes a queued email message from a file. Before the patch, it used the insecure `unserialize()` function. A malicious actor could craft a serialized PHP object and place it in the mail queue path. When `restoreItem` is called to process this file, it would deserialize the malicious object, leading to potential remote code execution or other security impacts.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

5.2

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2026-0895: mailqueue TYPO3 extension affected by Insecure Deserialization

Description

CVE-2026-0895:

5.2

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

5.2

5.2

Basic Information

Basic Information

CVE-2026-0895: mailqueue TYPO3 extension affected by Insecure Deserialization

Description

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI