CVE-2026-3710: carmelo simple flight ticket booking system – CVSS 7.2 · Watchpost