BigBlueButton: Insecure Randomness allows to guess user's conference session token and impersonate them (CVE-2026-46351) | HOL Guard CVE