Improper access control in Hashtopolis server chunk activity component (CVE-2026-22104) | HOL Guard CVE