CVE-2026-109772: Same-origin policy bypass in the… – CVSS 9.1 · Watchpost