CVE-2026-66650: Unauthenticated PHP Object Injection in… – CVSS 9.8 · Watchpost