Open redirect in MISP dashboard button widget URL handling (CVE-2026-10856) | HOL Guard CVE