Polybase Payy vulnerabilities

• polybase payy Payy: agg_agg trailing message slots are unconstrained and allow forged burn messages CVE-2026-48100 8.7 HighSeptember 28, 2026