Hackers now exploit critical Barracuda ESG flaws to gain root access

Barracuda Networks warned that attackers are exploiting two recently patched Email Security Gateway (ESG) vulnerabilities that can allow commands to run with root privileges on a device. Successful exploitation requires access to the administrative interface of an affected device. Barracuda said the current exploitation affects a limited number of customers.