CVE-2026-65905: Circular Buffer Replay Window Premature Clearcve-2026-65905-circular-buffer-replay-window-premature-clear
The circular buffer replay window clears an entry at `count % length` before incrementing `count`. If the newly validated index coincides with the current counter modulo length, setting the slot to `seen = true` is immediately overwritten by `seen = false`, leaving the system vulnerable to request replay. Increment `count` before resetting the slot at the up