CVE-2026-35075: An unauthenticated remote attacker can… – CVSS 9.8 · Watchpost