1 story taggedCVE-2026-65660.
A vulnerability first rated medium turned out to let logged-in users execute code on the server. The researcher who found it just published the details.