CVE-2026-36669: An unauthenticated arbitrary file upload… – CVSS 9.8 · Watchpost