Two critical security vulnerabilities in Barracuda Email Security Gateway (ESG) could let unauthenticated attackers bypass authentication and run operating system commands as root. The vulnerabilities, tracked as CVE-2026-116606 and CVE-2026-111560, were detailed by security researcher Sina Kheirkhah from watchTowr Labs on November 5, 2026. Barracuda Email Security Gateway Flaws The flaws affect Barracuda security appliances […]
Read the original article:
Barracuda Email Security Gateway Flaws Allow Unauthenticated Attackers to Execute Commands as Root
