CVE-2026-87898: OS command injection in Plesk allows… – CVSS 9.4 · Watchpost