CVE-2026-25255: qualcomm package manager – CVSS 7.8 · Watchpost