RCE in Typo3 Extension "Typo3 Backup Plus"

CVE-2025-9573

The ns_backup extension through 13.0.2 for TYPO3 allows command injection.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.011 (62.7th percentile) — read the EPSS interpretation.