Session fixation attacks on improperly configured OAuth 1.0a tools (CVE-2026-13707) | HOL Guard CVE