AI Summary

Threat actors are exploiting two recently patched Barracuda vulnerabilities that can be chained to bypass authorization and gain root access. CVE‑2026‑116606, an authentication bypass in the Barracuda Email Security Gateway, lets an attacker with admin UI access restore a crafted backup and alter the appliance’s configuration. CVE‑2026‑111560 is a command‑injection flaw affecting multiple Barracuda products, allowing an admin‑level attacker to execute OS commands as root. Barracuda warned that combined exploitation of the flaws could grant full device control.

AI summaries can be wrong sometimes—always verify important details using the source article.