CVE-2026-66600: Author Arbitrary File Upload in Media… – CVSS 9.1 · Watchpost