CVE-2026-3708: carmelo simple flight ticket booking system – CVSS 9.8 · Watchpost