account-takeover1 arbitrary-file-read1 beaksec2 command-injection1 critical1 csrf1 cve-2026-492431 high1 rce1 telegram1 webmin1 xss1