AVideo: Unauthenticated Arbitrary Image Read via Path Traversal in `view/img/image404Raw.php` (CVE-2026-46337) | HOL Guard CVE