TYPO3 sf_register extension allows unauthorized assignment of frontend user groups (CVE-2026-46721) | HOL Guard CVE