CVE-2026-5533: XSS in pi-mono Web UI | NextGuard