Barracuda Email Security Gateway Pre-Auth RCE disclosed
Original title: Security Affairs newsletter Round 603 by Pierluigi Paganini – INTERNATIONAL EDITION
The advisory mentions CVE-2026-116606 and CVE-2026-111560 for Barracuda Email Security Gateway.
Security Affairs newsletter Round 603 includes reports on various cyber incidents. It highlights a pre-auth remote root RCE in Barracuda Email Security Gateway with CVEs 2026-116606 and 2026-111560. Other topics cover ransomware, botnets and international cyber news.
- Barracuda Email Security Gateway Pre-Auth RCE
- CVE-2026-116606
- CVE-2026-111560
- Multiple cyber incidents covered
- International edition
Impact: remote code execution as root
- Vendors
- Barracuda
- Products
- Email Security Gateway
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-111560 | Command Injection in Barracuda Appliance Timezone Field | 8.6 | — | ||
| CVE-2026-116606 | Auth bypass in Barracuda Email Security Gateway before 9.4.0.030 | 9.3 | — |
From the original article
2 min read at securityaffairs.com
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press.
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.