Barracuda disclosed two product vulnerabilities that can be chained to bypass authorization controls and gain root access.
The issues comprise CVE-2026-116606 affecting Email Security Gateway and CVE-2026-111560 impacting multiple Barracuda platforms.
Exploitation requires administrative interface access, prompting recommendations to restrict network exposure and apply current firmware updates.
The issues involve bypassing security checks before logging in and executing system commands. The first issue affects the company's email security system exclusively. The second affects a wide range of products, including load balancing systems, message archiving, and web protection.
How can the attack be carried out?
According to the company, in order to exploit these vulnerabilities, someone would need access to the affected product's admin panel. Organizations that do not expose their admin panels to the internet are at lower risk.
What should organizations do?
The company urges its customers to limit access to management screens exclusively to trusted internal networks and to use appropriate protection measures.
↳
READ ALSO
HACKS.GR / RELATED
Vulnerabilities & Security Updates
Updated Windows infected because Microsoft doesn't automatically enable critical protection
↗
At the same time, users are advised to verify that their systems are running the latest software versions and have received all necessary security patches. If devices are several versions behind, more than one update may be required.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article
Top comments (0)