CVE-2026-118077: Author PHP Object Injection in Sastra… – CVSS 7.2 · Watchpost