CVE-2026-118073: Subscriber PHP Object Injection in News… – CVSS 8.8 · Watchpost