Reversible ecos_pw Cookie Allows Authentication Bypass in Nexxt Nebula 300+ (CVE-2026-31848) | HOL Guard CVE