#authorization bypass
Barracuda Confirms Hackers Are Chaining Two Email Gateway Bugs for Full Root Access
Barracuda says a small number of customers have already been hit by attackers combining two vulnerabilities in its Email Security Gateway to gain root-level access without authentication. The...
GitLab Patches High-Severity Duo AI Identity Flaw and Multiple Authorization, DoS Vulnerabilities
GitLab has released emergency security patches (versions 19.0.1, 18.11.4, 18.10.7) fixing a CVSS 8.2 Duo AI identity flaw (CVE-2026-4868) that could enable lateral movement, alongside a Wiki denial-of-service...