CVE-2025-8494: carmelo intern membership management system – CVSS 9.8 · Watchpost