CVE-2026-49742 — Backend users with file download permissions were able to download files from the fallback storage of the file abstraction layer (FAL) via the Media Module. Since the fallback storage resolves paths r — CVE Database · The Intelligence Room