CVE-2026-40386: libexif project libexif – CVSS 7.1 · Watchpost