CoreWCF: WS-Security signature substitution via document-wide Signature lookup (CVE-2026-54773) | HOL Guard CVE