Hubzero Hubzero-cms vulnerabilities

• hubzero hubzero-cms HUBzero CMS through 2.2.32 Session Fixation via Query-String Session Identifier CVE-2026-92984 8.5 HighSeptember 17, 2026
• hubzero hubzero-cms HUBzero CMS through 2.2.32 Path Traversal via File Upload CVE-2026-92970 8.7 HighSeptember 17, 2026