wger: Privilege escalation via trainer-login session chaining allows gym trainers to impersonate gym managers (CVE-2026-43978) | HOL Guard CVE