#CVE_2026_74864
LightNews LightNews
threadlinqs.bsky.social
YunoHost's SOGo package trusts a spoofable header - any password logs you in as any user, admins too. https://intel.threadlinqs.com/threat/TL-2026-2816 #ThreatIntel #CVE_2026_74864 #CVE_2026_74865 #CALENDAR
CVE-2026-74864 / CVE-2026-74865: Authentication bypass in YunoHost-Apps sogo_yhn (SOGo proxy-auth trust)
September 30, 2026 at 2:09 PM