Barracuda Networks warned that hackers are actively exploiting two critical vulnerabilities in its Email Security Gateway appliances. The flaws, tracked as CVE-2026-116606 and CVE-2026-111560, allow unauthenticated attackers to inject operating system commands and execute them with root privileges. Successful exploitation requires access to the administrative user interface of the targeted devices. The company released security patches one week prior to the warning and advised customers to apply updates immediately if automatic patching is disabled. Barracuda noted that the attacks have affected a limited number of organizations so far.
Read the full story at bleepingcomputer.com.
Photo: lrobertson / Pixabay
