Critical phpBB authentication bypass vulnerability discovered June 2026 affects 10 years of forum installations. Attackers can log in as any user including