Barracuda has disclosed details of two vulnerabilities affecting its products that, if chained together, could allow an attacker to bypass authorization controls and gain root access to a susceptible device. The vulnerabilities, a pre-authentication authorization bypass vulnerability and a command injection vulnerability, have been assigned the CVE identifiers CVE-2026-116606 (CVSS score: 9.3)
Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access
About this summary. This is a short excerpt from the description that The Hacker News published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://thehackernews.com/2026/11/barracuda-flaws-could-be-chained-to.html
Source attribution: headline and facts are from The Hacker News (thehackernews.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Barracuda warns of critical flaws allowing root access to devices
Cybersecurity company Barracuda Networks warned customers to patch two vulnerabilities that can let attackers run commands with root privileges.
Progress Software security advisory (AV26-1116)
Serial number: AV26-1116 Date: November 3, 2026 As of October 29, 2026, Progress Software is affected by a vulnerability in the following product: WS_FTP Server Prior to…
USN-8973-1: libmspack vulnerability
It was discovered that libmspack did not properly initialize pointers when handling errors while reading KWAJ archive headers. An attacker could possibly use this issue…
Hackers Exploit BTCPay Server Flaw to Steal Cryptocurrency
Attackers drained hot wallets on outdated BTCPay Server instances, with $1.63m traced so far
PostgreSQL security advisory (AV26-1115)
Serial number: AV26-1115 Date: November 3, 2026 As of November 2, 2026, PostgreSQL is affected by vulnerabilities in the following product: psqlODBC Prior to 18.00.0006…
Zyxel security advisory (AV26-1114)
Serial number: AV26-1114 Date: November 3, 2026 As of November 3, 2026, Zyxel is affected by vulnerabilities in the following products: Zyxel GS1900 series switches…