CVE-2016-6870: facebook hhvm – CVSS 9.8 · Watchpost