CVE-2026-117974: Use-after-free in the XML component – CVSS 8.8 · Watchpost