Security experts warn of widespread exploitation of CVE-2026-0257, with one saying “What stands out is how simple it is”.