CVE-2026-49488: apache openmeetings – CVSS 6.5 · Watchpost