VeloCloud Orchestrator OS Command Injection (CVE-2026-16812) | HOL Guard CVE