CVE-2026-92001: apache sling xss protection api – CVSS 6.1 · Watchpost