Plone Plone.app.portlets vulnerabilities

• plone plone.app.portlets plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection CVE-2026-57149 Fix available 9.9 CriticalSeptember 22, 2026
• plone plone.app.portlets plone.app.portlets: Denial of service via RSS feed portlet CVE-2026-55248 Fix available 9.1 CriticalAugust 28, 2026