Barracuda ESG Flaws Chain to Unauthenticated Root Access
RedSide Security November 06, 2026 Vulnerability 5 views
Researchers at watchTowr chained an authorization bypass (CVE-2026-116606) with a second flaw in Barracuda's Email Security Gateway to achieve root command execution without authentication. Patches are available.
Root Access
Authorization Bypass
Barracuda
Email Security Gateway
CVE-2026-116606
watchTowr
Appliance Security
Continue reading: Barracuda ESG Flaws Chain to Unauthenticated Root …
