SoftMarket <= 1.0.0 - Unauthenticated Account Takeover via Email Verification Bypass (CVE-2026-14557) | HOL Guard CVE