Pre-authentication denial of service in the public dashboard query endpoint (CVE-2026-42127) | HOL Guard CVE