Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

Reported by Security Affairs (Pierluigi Paganini)

Summary by Cyber Security News4 Nov 2026, 22:04 CET

About this summary. This is a short excerpt from the description that Security Affairs published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://securityaffairs.com/202440/security/two-barracuda-esg-flaws-could-be-combined-for-full-root-access-patches-released.html

Barracuda patched two flaws that can be chained to give attackers root access to Email Security Gateway appliances. Barracuda has patched two vulnerabilities that can be chained to gain root access to its Email Security Gateway (ESG) appliances. CVE-2026-116606 (CVSS score of 9.3) is an authentication bypass that lets unauthenticated attackers modify appliance configurations.

Read the full article at Security Affairs →