Barracuda Email Security Gateway
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Security timeline
- Vulnerability reported by SecurityWeekBarracuda Email Security Gateway flaws can be chained for root access
- Vulnerability reported by The Hacker NewsBarracuda patches two flaws that could let attackers gain root access on appliances
- Vulnerability reported by Canadian Centre for Cyber SecurityBarracuda warns of pre-authentication authorisation bypass and command injection flaws in several products
Recent news
Barracuda Email Security Gateway flaws can be chained for root access
An authentication bypass and a command injection flaw can be chained to achieve root access on Barracuda Email Security Gateway appliances. The article gives no CVE identifiers, affected versions or patch details, so administrators should check the vendor's advisory directly.
Barracuda patches two flaws that could let attackers gain root access on appliances
Barracuda has disclosed CVE-2026-116606, a pre-authentication authorisation bypass in Barracuda Email Security Gateway rated 9.3 CVSS, and CVE-2026-111560, a command injection flaw rated 8.6 across six product families. Combined, the vendor says they could bypass controls and obtain root access, though exploitation requires access to the administrative interface. The advisory reports no active exploitation, and Barracuda labels both issues High; administrators should restrict management interfaces to trusted networks and apply the firmware patches.
Barracuda warns of pre-authentication authorisation bypass and command injection flaws in several products
The Canadian Centre for Cyber Security issued advisory AV26-1112 on 2 November 2026 about pre-authentication authorisation bypass and command injection vulnerabilities in Barracuda Email Security Gateway, Load Balancer ADC, Web Application Firewall, Web Security Gateway, Message Archiver and WAF Control Center. Affected versions are those prior to 9.4.0.030, 6.4.0, 11.0.1, 16.1.100.100, 5.5.4.0 and 2.2.1 respectively, and fixed updates are available from Barracuda.