J jivasecurity.com Dolibarr 23.0.0: PHP eval() whitelist bypass → RCE via two bugs (CVE-2026-22666) 2 points jiva 6 months ago 1 comments