CVE-2026-23926 — An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenance period in the Host navigator w — CVE Database · The Intelligence Room