The Hacker News
Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login
Two critical vulnerabilities in Barracuda Email Security Gateway can be chained to grant root access without authentication. The authorization bypass (CVE-2026-116606) enables unauthenticated attackers to restore backups and execute commands. Patches were released Monday; watchTowr disclosed details Thursday.
AI summary · generated with Claude
https://thehackernews.com/2026/11/experts-demonstrate-barracuda-email.html