Session takeover vulnerability (CVE-2026-13602) | HOL Guard CVE