TYPO3-EXT-SA-2026-038: Broken Access Control in extension "Frontend User Registration" (sf_register)

PKSA-d3w6-c3np-2vn6 CVE-2026-120333

Affected version: >=14.0.0,<14.0.3|<13.2.5

Reported by:
FriendsOfPHP/security-advisories

[MEDIUM] TYPO3-EXT-SA-2026-009: Broken Access Control in extension "Frontend User Registration" (sf_register)

PKSA-1gw5-qx8s-xyvr CVE-2026-46721 GHSA-v348-vr4q-fv9p

Affected version: >=14.0.0,<14.0.2|<13.2.4

Reported by:
FriendsOfPHP/security-advisories, GitHub