CVE-2026-3723: carmelo simple flight ticket booking system – CVSS 9.8 · Watchpost