CVE-2026-39254 (CRITICAL 9.8) · Watchpost