CVE-2025-40646: energycrm energy crm – CVSS 5.4 · Watchpost