CVE-2026-35312: oracle virtual directory – CVSS 9.8 · Watchpost