Suffix Matching Is Not Authorization: Lessons from CVE-2026-49869 in Kestra September 21, 2026 · Dev.to Read full story at source