CVE-2026-24464 — When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with administrator role privileges to cross — CVE Database · The Intelligence Room