CVE-2026-101155: An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the... (CVSS 9.1)

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository.