CVE-2026-20872: External control of file name or path in… – CVSS 6.5 · Watchpost