CVE-2026-21975: oracle java virtual machine – CVSS 4.5 · Watchpost