Wei-Shaw sub2api

• CVE-2026-73079 High 8.5 Sub2API: Path traversal in the Responses subpath routes lets an authenticated tenant relay requests to arbitrary upstream endpoints using pooled account credentials 0.4%
• CVE-2026-27812 High 8.0 Sub2API Vulnerable to Password Reset Poisoning via Host Header Trust Issue, Leading to Account Takeover 0.3%