CVE-2026-76156: OS command injection in the api endpoint… – CVSS 9.4 · Watchpost