EspoCRM: Formula engine and path traversal → RCE in six requests(CVE-2026-33656)
jivasecurity.com