CVE-2026-91768: FastCGI allowed_clients compared only 96 of an IPv6 address's 128 bits

[u/AlexandreDaubois]

https://daubois.dev/blog/cve-2026-91768-php-fpm-ipv6-allowed-clients-bypass/