> CVE-2026-98432 is a critical (CVSS 9.8) bug

That means nothing. A CVE's score is theoretical. It's up to every individual implementation to decide how it affects them.