#CVE-2026-116606

Barracuda vulnerabilities allow attackers to bypass authorization and gain root access

Attackers can chain two vulnerabilities to bypass authorization and gain root access to Barracuda Email Security Gateway (ESG) appliances. The command injection flaw in that chain also affects five other Barracuda products. Barracuda says exploitation requires access to the product's administrative interface. Upgrade your firmware to the latest version now and restrict management access to trusted internal networks.