CVE-2026-23654: microsoft zero-shot-scfoundation – CVSS 8.8 · Watchpost