CVE-2026-9968: External Control of Assumed-Immutable Web Parameter | Rapid7 Vulnerability Database