[rwth-security] CVE-2025-26633: Water Gamayun Exploits Windows MMC in Active Zero-Day Campaign