Bug Bounty 2 Unauthenticated SSRF with Response Disclosure on a Secrets-Retrieval Gateway Aug 9, 2026 Bypassing SMS & CAPTCHA Registration Controls Through a Native Magento REST API Aug 9, 2026