Missing TLS Certificate Verification in BOSH CLI Allows Root Code Execution via Man-in-the-Middle Credential Replay (CVE-2026-47828) | HOL Guard CVE