CVE-2026-98432 (zero-click remote code execution/RCE)