roinli HUIZHI-ChargeOS-cloud

• CVE-2026-111698 Medium 6.5 HUIZHI ChargeOS cloud through 3.0.9 Unpaid Wallet Credit via /pay/xcxRecharge 0.3%
• CVE-2026-111697 Medium 6.5 HUIZHI ChargeOS cloud through 3.0.9 IDOR via hcp-mp Member and Order APIs 0.4%