CVE-2026-76956: libexpat project libexpat – CVSS 7.5 · Watchpost