Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks.