Simple Machines Forum Authorization Bypass via AttachmentApprove.php (CVE-2026-39903) | HOL Guard CVE