CVE-2026-2378: thebrowser arc search – CVSS 6.5 · Watchpost