CVE-2026-4992: HTML Injection in wandb OpenUI | NextGuard