Cotonti: Cross-Site Request Forgery in the administration rights handler (CVE-2026-55742) | HOL Guard CVE