Summary

Barracuda patched two flaws that can be chained to give attackers root access to Email Security Gateway appliances. Barracuda has patched two vulnerabilities that can be chained to gain root access to its Email Security Gateway (ESG) appliances. CVE-2026-116606 (CVSS score of 9.3) is an authentication bypass that lets unauthenticated attackers modify appliance configurations. CVE-2026-111560 […]

For more information, read the full story at the original source: Security Affairs ↗

Vulnerabilities in this story

• CVE-2026-116606 Barracuda Networks Barracuda Email Security Gateway EPSS 1.6% 9.3Critical
• CVE-2026-111560 Barracuda Networks Barracuda Email Security Gateway, Barracuda Networks Barracuda Load Balancer Application Delivery Controller, Barracuda Networks Barracuda Message Archiver EPSS 1% 8.6High

Also reported by

• The Hacker News: Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login ↗