CVE-2026-35904: Incorrect access control in the web… – CVSS 9.8 · Watchpost