mchange-commons-java: Remote Code Execution via JNDI Reference Resolution (CVE-2026-27727) | HOL Guard CVE