CVE-2026-21967: oracle hospitality opera 5 – CVSS 8.6 · Watchpost