CVE-2026-97359 HFS2 2.4.0 RCE via Multipart Upload Filename Template Injection

HFS2 version 2.4.0 and earlier contains a template injection vulnerability in the multipart upload handler that allows unauthenticated attackers to achieve remote code execution by embedding malicious template syntax in a filename. Attackers can craft a filename containing a closing template...