TYPO3 published a High severity Form Framework access-control fix for CVE-2026-11607. Back up, update, restrict form-editing rights, and verify forms.