Network-AI: CVE-2026-46701 fix incomplete — empty default secret still authorizes all requests (CVE-2026-48814) | HOL Guard CVE