Barracuda ESG Authentication Bypass Flaw Opens Path to Root
Patching required for chained authentication bypass and command injection flaws in Barracuda products.
Barracuda released patches for two vulnerabilities that can be chained to gain root access to its Email Security Gateway appliances. The first is an authentication bypass that affects only ESG. The second is a command injection issue that also impacts five other Barracuda products. Attackers must reach the appliance’s admin interface to exploit the flaws, though the bypass can be performed without authentication.
Unconfirmed: It is unknown whether the flaws have been exploited in the wild.
- Authentication bypass allows unauthenticated remote configuration import.
- Command injection allows OS command execution as root.
- Flaws must be chained for full root access.
- Keep admin interfaces reachable only from trusted networks.
- Vendors
- Barracuda
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-111560 | Command Injection in Barracuda Appliance Timezone Field | 8.6 | — | ||
| CVE-2026-116606 | Auth bypass in Barracuda Email Security Gateway before 9.4.0.030 | 9.3 | — |
From the original article
2 min read at securityweek.com
An authentication bypass and a command injection flaw can be chained for root access on Barracuda’s Email Security Gateway appliances. The post Barracuda ESG Authentication Bypass Flaw Opens Path to Root appeared first on SecurityWeek.
By Eduard Kovacs · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.