Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560)
Summary
The article analyzes Barracuda ESG CVE-2026-116606 (Pre-Authentication Bypass) and CVE-2026-111560 (OS Command Injection), detailing patch changes, potential exploitation paths, and how an attacker could chain vulnerabilities via backup restoration and timezone configuration. It highlights practical implications for SMBs running Barracuda Email Security Gateway, and discusses mitigation and detection considerations.