CVE-2026-117947: Use-after-free in the XML component – CVSS 6.3 · Watchpost