CVE-2026-40552 — mpGabinet is vulnerable to Remote Command Execution. An authorized user with access to the application and direct access to the backend database can achieve system command execution by uploading an at — CVE Database · The Intelligence Room