CVE-2026-89308: An unauthenticated OS command injection… – CVSS 9.3 · Watchpost