CVE-2026-0636: Bouncy Castle has an LDAP injection – CVSS 6.5 · Watchpost