CVE-2026-5333: Command Injection in DefaultFuction CMS | NextGuard