YunoHost's SOGo package trusts a spoofable header - any password logs you in as any user, admins too. https://intel.threadlinqs.com/threat/TL-2026-2816 #ThreatIntel #CVE_2026_74864 #CVE_2026_74865 #CALENDAR