CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service. (CVE-2026-54775) | HOL Guard CVE