Nagios Core / XI Authenticated RCE via Unfiltered NOTIFICATION-Family Macro Substitution (CVE-2026-48554) | HOL Guard CVE