CVE-2026-117880: Use-after-free in the XML component – CVSS 6.3 · Watchpost