HTB Writeup – DevArea Posted on 2026-03-30 Java CXF SOAF XXE (CVE-2022-46364) to Hoverfly auth RCE (CVE-2025-54123)