Hugues-de-cibon CVE