morgan vulnerable to Log Forging via unneutralized control characters in :remote-user (CVE-2026-5078) | HOL Guard CVE