Attackers exploit patched Barracuda flaws chained for root access
CISA gave federal agencies three days to patch both flaws after attacks on a small number of organizations.
82
Product
Load Balancer ADC
- Mentions · 7d3
- Mentions · 30d4
- All mentions4
- First seenNov 3, 2026
- Last mentioned13h ago
Timeline
4 articles · newest firstAttackers exploit Barracuda ESG flaws to gain root access
Barracuda says a small number of customers were hit after patches for CVE-2026-116606 and CVE-2026-111560 shipped a week earlier.
84
Barracuda ESG flaws allow unauthenticated root command execution
CVE-2026-116606 and CVE-2026-111560 are fixed in 9.4.0.029; in-the-wild exploitation is not reported.
76
Barracuda critical flaws allow root access to devices
Two critical vulnerabilities in Barracuda ESG and related products could enable root access; patches released for affected versions.
60
Related CVEs
by mentions- CVE-2026-1166062%9.3Auth bypass in Barracuda Email Security Gateway before 9.4.0.030
- CVE-2026-1115601%8.6Command Injection in Barracuda Appliance Timezone Field
Appears with
- Web Security Gatewayproduct · 3
- Email Security Gatewayproduct · 3
- WAF Control Centerproduct · 3
- Web Application Firewallproduct · 3
- Message Archiverproduct · 3
- Barracudavendor · 2
- Barracuda Networksvendor · 2
- Message Archiver (BMA)product · 1
- WAF Control Center (WCC)product · 1
- Email Security Gateway (ESG)product · 1
- Web Security Gateway (WSG)product · 1
- watchTowr Labsorganization · 1
- CISAorganization · 1
- Previdianorganization · 1
- Web Application Firewall (WAF)product · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.