CVE-2026-28736: Focalboard IDOR in file content endpoint allows cross-user file access (unsupported product, no fix) — Zero Day Monitor