CVE-2026-15616: Logto does not enforce locally configured… – CVSS 9.1 · Watchpost