Attackers exploit Barracuda ESG flaws to gain root access
Barracuda says a small number of customers were hit after patches for CVE-2026-116606 and CVE-2026-111560 shipped a week earlier.
Stories per day · 30 days
2 RSS
Relatedbarracuda6command-injection4authorization-bypass3email-security-gateway3esg2acr1admin-ui1email-security1firecracker1kvm1privacy1samsung1smart-tv1tizen1vm-escape1web-application-firewall1
9 stories, newest first · one card per story
Stories tagged #root-access
Firecracker MicroVM Escape Allows Root Code Execution on Host
Researchers escape Firecracker microVM and achieve root code execution on the host by modifying saved registers in pt_regs.
Barracuda discloses authorization bypass and command injection flaws
Barracuda patched CVE-2026-116606 and CVE-2026-111560 which together could allow root access to affected appliances when exploited with administrative interface access.
Barracuda flaws chained to bypass authorization and gain root access
Chaining the two vulnerabilities allows root access if the admin interface is accessible; restrict admin exposure to internal networks and update firmware.
Barracuda critical flaws allow root access to devices
Two critical vulnerabilities in Barracuda ESG and related products could enable root access; patches released for affected versions.
Researcher claims root on 2025 Samsung Smart TV, details tracking
The claims, including always-on voice telemetry, have not been reproduced on an unmodified set, and Samsung has not responded.
HPE Networking Analytics Engine Flaws Let Attackers Gain Root Access
HPE patched ten Analytics Engine flaws, including unauthenticated bugs that can give attackers root.
Cisco Secure Firewall Management Center Software Vulnerabilities
Cisco Secure Firewall Management Center vulnerabilities could let remote attackers gain root access and perform session forgery or impersonation.
BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
Attackers used a BGP hijack to divert Softaculous traffic and push a malicious Virtualizor update granting root persistence on some hypervisors.
1