Pimcore: Missing Authorization in WebDAV MOVE via unchecked asset move handling (CVE-2026-45260) | HOL Guard CVE