CVE-2026-120333

The TYPO3 extension "Frontend User Registration" (sf_register) is affected by a broken access control vulnerability (CVE-2026-120333 ). The root cause is that actions linked in emails, such as account confirmation or deletion, fail to reject requests with missing or invalid hashes. Instead, the s...