Two Accepts and One Reject: How Bricksforge CVE-2026-85097 Turned a Form Upload into a Webshell

A MIME check that passes and a filename that does not have to match: how two validation stages in Bricksforge produced unauthenticated RCE, and what the attempt telemetry says about who is scanning.