CVE-2026-3711: carmelo simple flight ticket booking system – CVSS 7.2 · Watchpost