Jmpsec Osctrl vulnerabilities

• jmpsec osctrl `osctrl-admin` has Stored Cross-Site Scripting (XSS) in On-Demand Query List CVE-2026-28280 Fix available 6.1 MediumFebruary 26, 2026
• jmpsec osctrl `osctrl-admin` Vulnerable to OS Command Injection via Environment Configuration CVE-2026-28279 Fix available 7.4 HighFebruary 26, 2026