responsible-disclosure 1 CVE-2026-118477 - OS Command Injection in KaliFast Git Remote Configuration Oct 29, 2026