CVE-2026-16626: Improper restriction of XML external… – CVSS 9.3 · Watchpost