CVE-2026-0859 — TYPO3's mail‑file spool deserialization flaw lets local users with write access to the spool directory craft a malicious file that is deserialized during the mailer:spool:send command, enabling ar — CVE Database · The Intelligence Room