CVE-2026-39912chocapikk/cve-2026-39912Xboard / V2Board Unauth Account Takeover - Magic Link Token Leak (CVE-2026-39912)authenticationexploitationinformation-gathering+42