CERT24Barracuda ESG authentication bypass flaw may enable root accessLoading data…
CERT24Threat Observatory
Period

Barracuda ESG authentication bypass flaw may enable root access

Barracuda released patches for two vulnerabilities that can be chained to gain root access to Email Security Gateway (ESG) appliances. CVE-2026-116606 is an authentication bypass affecting ESG, with a CVSS score of 9.3. CVE-2026-111560 is a command injection flaw with a CVSS score of 8.6 that also affects five other Barracuda products.

← Back to intelligence

Barracuda ESG authentication bypass flaw may enable root access

Barracuda released patches for two vulnerabilities that can be chained to gain root access to Email Security Gateway (ESG) appliances. CVE-2026-116606 is an authentication bypass affecting ESG, with a CVSS score of 9.3. CVE-2026-111560 is a command injection flaw with a CVSS score of 8.6 that also affects five other Barracuda products.