CVE-2026-38526: An authenticated arbitrary file upload… – CVSS 9.9 · Watchpost