Wazuh: CRLF Log Injection via Unsanitized Basic-Auth Username (CVE-2026-44256) | HOL Guard CVE