CVE-2026-32776: libexpat project libexpat – CVSS 5.5 · Watchpost