Hackers now exploit critical Barracuda ESG flaws to gain root access - BleepingComputer
Cybersecurity company Barracuda Networks has confirmed that attackers are now exploiting two recently patched Email Security Gateway vulnerabilities to gain root privileges on targeted devices.
The vulnerabilities, tracked as CVE-2026-116606 and CVE-2026-111560, were patched just one week ago. The first flaw stems from an authentication weakness that allows modification of an appliance's global configuration, while the second enables unauthenticated attackers to inject OS commands with root privileges.
Barracuda updated its advisory on Monday evening to warn that these flaws are being actively exploited in attacks targeting a limited number of customers. The company emphasized that successful exploitation requires access to the administrative user interface of targeted devices.
Attack Requirements
Barracuda explained that successful attacks require access to the administrative interface of affected products. When exploited together, these vulnerabilities could allow attackers to bypass authorization controls and obtain root access to the device.
Successful exploitation requires an attacker to have access to the administrative interface of an affected product. If exploited in combination, these vulnerabilities could allow an attacker to bypass authorization controls and obtain root access to the device.
Remediation Advice
The company has initiated a comprehensive remediation process and urges customers to apply patches immediately. "If a patch has not been automatically applied, customers should manually apply the appropriate patch as soon as possible," Barracuda advised.
This isn't the first time Barracuda ESG appliances have been targeted. In 2023, the UNC4841 hacking group exploited a zero-day vulnerability (CVE-2023-7102) to execute arbitrary code, with Mandiant reporting that almost a third of breached systems belonged to government agencies.
Founded in 2003, Barracuda now has over 200,000 customers worldwide, including SMBs, large enterprises, and MSPs, making these vulnerabilities particularly concerning given the potential scale of impact.
Related
