argument-injection 1 CVE-2026-73294 - One Dash From RCE -- Git Argument Injection in Semaphore UI (0-day) Aug 7, 2026