doc: vuln: Add CVE under embargo

Add an entry to CVE-2025-12899.

Signed-off-by: Flavio Ceolin <flavio@hubblenetwork.com>

Author: ceolin

doc/security/vulnerabilities.rst

@@ -2039,3 +2039,8 @@ This has been fixed in main for v4.2.0
 
 - `PR 89955 fix for main
   <https://github.com/zephyrproject-rtos/zephyr/pull/89955>`_
+
+:cve:`2025-12899`
+-----------------
+
+Under embargo until 2026-01-28