HGiga Patches Critical Authentication Bypass and SQL Injection Flaws in C&Cm@il

#cybersecurity #infosec

Summary

HGiga patched three vulnerabilities in its C&Cm@il platform, including a critical missing authentication flaw (CVE-2026-2234) that allows unauthenticated attackers to read and modify any user's emails.

Take Action:

If you use HGiga C&Cm@il, plan a quick update to version 7.0-978. Since the most severe flaw allows attackers to read mail without a password, treat this as a high-priority emergency patch.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines