information-disclosure 2 CVE-2026-16612: FiboSearch Autocomplete Exposed Password-Protected Products Aug 20, 2026 CVE-2026-11571: When an Email CSV Attachment Stayed Public in Everest Forms Jun 19, 2026