authentication read more about Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login

Three security vulnerabilities in LG's webOS operating system could allow attackers to gain complete control of certain LG smart TVs without authentication or any action from the owner. The flaws can be combined to obtain root access when an attacker is connected to the same local network as the television. LG has released a firmware fix for the vulnerabilities, following their disclosure by SSD Secure Disclosure on October 12. Users are advised to check their devices for available software updates. Models impacted Researchers tested the vulnerability chain on two LG television models: the 32LQ636BPSA and the 27TQ600SW. Both devices were running webOS version 7.5.7-25 with firmware 04.54.40. It remains unclear whether other models or firmware versions are affected. The attack begins by targeting a network service on port 3001, which is used by the LG ThinQ application to pair with televisions. Researchers found that an attacker could exploit a built-in application called sync-demo to bypass the normal pairing PIN requirement and obtain a privileged key. Using this key, the attacker can launch another preinstalled application, known as cmp-client, and direct it to a webpage controlled by the attacker. The application does not properly restrict where it can navigate, allowing the malicious webpage to access an internal webOS interface called PalmServiceBridge. This interface provides communication with system services. Researchers found that it could be used to reach pmlogd, a system logging service that operates with root privileges. Because the service does not properly validate certain input, an attacker can inject shell commands that are executed with the highest level of access on the television. The combined vulnerabilities therefore allow an attacker to move from an unauthenticated network connection to root-level control without requiring the television owner to enter a PIN, approve a request or click a link. What is at risk? Root access can give attackers extensive control over an affected television. Depending on the device configuration and the attacker's actions, this could enable unauthorised software execution, system manipulation and potential exposure of information stored on the device. The disclosure was demonstrated by an anonymous researcher who secured third place in the LG webOS category at the TyphoonPWN 2026 security competition in Seoul. No CVE identifiers have been assigned to these newly disclosed flaws, and no exploitation in the wild has been reported.

Two Unknown Bugs Became Full Server Control Two unknown vulnerabilities turned the Zammad support system into an entry point with full control of the server. The Dutch Institute for Vulnerability Disclosure (DIVD) revealed the attack in its DIVD case record. On September 21, attackers broke into its infrastructure through a chain of zero-days. Within seconds, they moved from session hijacking to code execution.

Hackers hijacked BGP routing to deliver malicious Virtualizor updates, compromising root access on some servers and prompting security warnings.

A OnePlus 15 running the latest OxygenOS can be rooted by a malicious app the owner installs, one that asks for no special permissions. A researcher, Rasmus Moorats, chained two flaws in OnePlus's own software to gain root access, the highest level of control over an Android phone. OnePlus told him the same flaws affect many more of its own devices and those of OPPO, though it has not

A critical vulnerability in LiteSpeed Web Server Enterprise could let a low-privilege website user gain root access on a shared-hosting server, cPanel warned in an advisory published on September 14. On such servers, many customers' sites run on a single machine, and an attacker with one of those hosting accounts could exploit the flaw to access or alter other sites and the server itself,

TL;DR Cisco confirmed active attacks on a critical Cisco Secure Email Gateway vulnerability. Tracked as CVE-2026-76461, it scores a CVSS 9.8. An unauthenticated attacker can send a crafted email and run commands as root. Why this Cisco Secure Email Gateway vulnerability matters Email gateways sit at the edge of corporate networks. They inspect every inbound message. A root-level flaw there hands attackers deep control.