Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac.php (CVE-2026-34112) | HOL Guard CVE