CVE-2026-11856: haxx curl – CVSS 9.8 · Watchpost