cube-root directory-serve

• CVE-2026-72570 Medium 5.4 cube-root directory-serve - Stored Cross-Site Scripting via Malicious Filename 0.2%
• CVE-2026-72569 Critical 9.1 cube-root directory-serve - Unauthenticated Path Traversal Arbitrary File Deletion 0.7%