CVE-2026-5504 PKCS7 CBC Padding Oracle — Plaintext Recovery