CVE-2026-21249: External control of file name or path in… – CVSS 3.3 · Watchpost