Notifiarr - Dockwatch - CRITICAL - CVE-2026-58455. Dockwatch version 0.6.567 is vulnerable to an OS command injection due to inadequate input sanitization in its AJAX functionality. The vulnerability allows remote attackers to exploit a missing exit call in the authentication process, which can lead to arbitrary shell commands being executed via the `composePath` parameter in `ajax/compose.php`. By seeding a session flag through the incomplete authentication check, attackers can gain full access and potentially compromise the entire host system, especially in environments with standard Docker socket deployments.