CVE-2026-74865

The sogo_yhn component contains an authentication bypass vulnerability caused by the configuration parameter SOGoTrustProxyAuthentication=YES. This configuration allows an unauthenticated attacker to bypass password requirements during HTTP Basic authentication by providing a valid username and a...