Review Coolify CVE-2026-15507 with a backup-first self-hosted server checklist for versions 4.1.1 and older, access controls, tokens, deployments, logs, and hosted apps.