https://cybercrime.club/tags/authorization-bypass/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usThu, 29 Oct 2026 23:03:09 -0400https://cybercrime.club/posts/hashicorp-consul-k8s-cve-2026-110720-cross-namespace-acl-binding-bypass/Thu, 29 Oct 2026 23:03:09 -0400https://cybercrime.club/posts/hashicorp-consul-k8s-cve-2026-110720-cross-namespace-acl-binding-bypass/HashiCorp's HCSEC-2026-50 fixes an incorrect-authorization flaw in consul-k8s component ACL binding rules that lets a ServiceAccount in any namespace authenticate as a Consul component.vulnerabilities