[HIGH] TYPO3-CORE-SA-2026-017: Privilege Escalation & SQL Injection in Form Framework

PKSA-hqhs-7j5f-td2d CVE-2026-49741 GHSA-jh32-v29g-68pq

Affected package: typo3/cms-core

Affected version: >=14.0.0,<14.3.3

Reported by:
GitHub, FriendsOfPHP/security-advisories