CVE-2026-4873 connection reuse ignores TLS requirement