CVE-2026-116606 – Security Blog https://blog.siteguarding.com Sat, 07 Nov 2026 07:59:03 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.3 https://blog.siteguarding.com/wp-content/uploads/2016/07/cropped-Logo_sh_last_2_last-32x32.jpg CVE-2026-116606 – Security Blog https://blog.siteguarding.com 32 32 Barracuda ESG Vulnerability Chains to Root With No Login https://www.siteguarding.com/security-blog/barracuda-esg-unauthenticated-root-chain/ Sat, 07 Nov 2026 07:59:03 +0000 https://www.siteguarding.com/security-blog/barracuda-esg-unauthenticated-root-chain/ A Barracuda ESG vulnerability pair, CVE-2026-116606 and CVE-2026-111560, lets an attacker with no account run commands as root on Barracuda's Email Security Gateway. The fix is firmware 9.4.0.030 or later. Patching matters because this appliance sees every email your business handles, including the password resets that control your website. Key takeaways Researchers at watchTowr showed that two...

Source

]]>