Attackers exploit Barracuda ESG bypass and command injection
Barracuda says a small number of organizations were hit; chaining the bugs can yield root on the device.
Stories per day · 30 days
3 RSS
Relatedarmory-castle2beyondtrust2cve-2026-1027642webshell2zero-day2barracuda1china1command-injection1email-security-gateway1privilege-escalation1remote-support1sawfly1
6 stories, newest first · one card per story
Stories tagged #edge-device
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
China-linked Armory Castle exploited BeyondTrust Remote Support zero-day CVE-2026-102764 and deployed the SAWFLY webshell.
2
Google Warns Chinese Hackers Exploited Critical BeyondTrust Zero-Day to Gain Root Access
China-linked ARMORY CASTLE exploited BeyondTrust zero-day CVE-2026-102764 for root access before disclosure.
8
US, Australia warn of latest Citrix vulnerability after NetScaler advisory
CISA orders agencies to patch actively exploited Citrix NetScaler flaw CVE-2026-88779, a confirmed denial-of-service bug.
Custom malware used in Citrix 0-day attacks targeting govt, banks, professional services
Unknown attackers exploited critical Citrix NetScaler zero-days CVE-2026-88771/88772 since early September, deploying custom WHIPSHOT and SLAPSHOT malware for persistence and tunneling.
Hackers Chain Two New SonicWall Zero-Day Vulnerabilities
SonicWall warns two zero-days (CVE-2026-83548 SSRF, CVE-2026-83549 post-auth RCE) in SMA1000 appliances are being actively exploited.