CVE-2026-38600: A Zip Slip vulnerability in the /upload… – CVSS 9.8 · Watchpost