🚨 CVE-2026-48958
An improper access check allows unauthorized users to create custom fields via webservices endpoints.