Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speech_text.php (CVE-2026-34113) | HOL Guard CVE