CVE-2026-22200horizon3ai/cve-2026-22200CVE-2026-22200: Arbitrary file read + CNEXT RCE in osTicketbinary-exploitationexploitationpayload-generation+315