Two unauthenticated requests: poison a Magento failure report, then drive the email template system into the DI compiler that includes it. Full chain analysis, lab PoC, and mitigations.