CVE-2026-49492 — Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview through a shell and does not validate untrusted inputs taken from the markdown document - the diagram filename a — CVE Database · The Intelligence Room