CERT24Barracuda ESG authentication bypass flaw opens path to rootLoading data…
CERT24Threat Observatory
Period

Barracuda ESG authentication bypass flaw opens path to root

Barracuda has released patches for two vulnerabilities that can be chained to obtain root access to Email Security Gateway appliances. CVE-2026-116606 is an authentication bypass affecting ESG, with a CVSS score of 9.3. CVE-2026-111560 is a command injection flaw with a CVSS score of 8.6 that also affects five other Barracuda products.

← Back to intelligence

Barracuda ESG authentication bypass flaw opens path to root

Barracuda has released patches for two vulnerabilities that can be chained to obtain root access to Email Security Gateway appliances. CVE-2026-116606 is an authentication bypass affecting ESG, with a CVSS score of 9.3. CVE-2026-111560 is a command injection flaw with a CVSS score of 8.6 that also affects five other Barracuda products.