Skip to content

Back to the catalog

Barracuda warns of critical flaws allowing root access to devices
bleepingcomputer.comarticle

Barracuda warns of critical flaws allowing root access to devices

Barracuda Networks disclosed two flaws that can combine to give root access to its appliances. CVE-2026-116606 is a critical Email Security Gateway authentication weakness that lets attackers modify global configuration. CVE-2026-111560 lets an admin inject OS commands that run as root. Exploitation needs access to the admin interface; patches are released. The article recalls the 2023 UNC4841 attacks on ESG (CVE-2023-2868, CVE-2023-7102).

TL;DR Barracuda patches two flaws in its appliances that, chained, give root via the admin interface, including an ESG auth bypass.
Open original ↗

Organisations named here

  • Mandiant
  • Barracuda Networks

CVEs named here

  • CVE-2026-116606
  • CVE-2026-111560
  • CVE-2023-7102
  • CVE-2023-2868

Technologies named here

  • Barracuda Email Security Gateway
  • Barracuda Networks

Techniques named here

  • OS Command Injection
  • Authentication bypass
  • Zero-day exploitation
  • Command injection

Concepts named here

  • Administrative interface exposure
  • Vulnerability chaining

Threat actors named here

  • Saltwater
  • SeaSpy
  • UNC4841

Related in AppSec