CVE-2026-28756 (MEDIUM 4.8) · Watchpost