https://invaders.ie/resources/blog/vulnerability/gitea-docker-cve-2026-20896-reverse-proxy-auth-bypass Invaders Security en 2026-07-12T08:06:12.902Z Gitea Docker flaw turns a trusted proxy header into account takeover Gitea, CVE-2026-20896, Docker, reverse proxy authentication, X-WEBAUTH-USER, authentication bypass, account takeover, source code security, DevSecOps, trusted proxy https://invaders.ie/resources/blog/vulnerability/u-boot-fit-signature-flaws-pre-os-trust-boundary Invaders Security en 2026-07-11T08:05:13.727Z U-Boot FIT signature flaws expose a fragile pre-OS trust boundary U-Boot, FIT signature verification, firmware security, bootloader, BRLY-2026-037, BRLY-2026-038, secure boot, embedded Linux, BMC, supply chain