CVE-2026-66147: An unauthenticated command injection… – CVSS 9.4 · Watchpost