CVE-2026-18972: An authenticated attacker can spoof… – CVSS 9.6 · Watchpost