The Register
Barracuda’s email security gateways bitten by make-me-root vulns
Barracuda warns of pre-authentication authorization bypass and command-injection vulnerabilities in its Email Security Gateway products. When chained, these flaws allow attackers to execute commands with root privileges. Active exploitation affecting a small number of organizations has been confirmed.
AI summary · generated with Claude