CloakBrowser: Unauthenticated path traversal via fingerprint parameter in cloakserve leads to arbitrary directory deletion (CVE-2026-45727) | HOL Guard CVE