CVE-2026-39617: CSRF in Bluestreet | NextGuard