Barracuda Email Security Gateway Bug Chain Gives Unauthenticated Attackers Root: CVE-2026-116606 and CVE-2026-111560
watchTowr chained a login-handler bypass, a crafted backup restore and a timezone-field injection to root on Barracuda ESG. Patches shipped 2 November; five more products carry the root flaw.
· 4 min