CVE-2026-54161

upsmon: remote OS command injection RCE via attacker-controlled ups.alarm in NOTIFYCMD execution...