CVE-2025-40599: An authenticated arbitrary file upload… – CVSS 9.1 · Watchpost