How many vulnerabilities added to the CISA KEV catalog between June 8 and August 5, 2026, will carry a ransomware flag and have a CVSS v3.1 Base Score published in the NIST NVD by August 7, 2026?