CVE-2025-3856: xxyopen novel-plus – CVSS 9.8 · Watchpost