CVE-2026-116606 2

Vulnerability (CVE)

CISA Adds Six Known Exploited Vulnerabilities to Catalog

Cyber Risks CISA Advisories Nov 10, 2026

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-20320 Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability CVE-2026-111560...

Vulnerabilities & Patching

CVE-2026-116606: Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Nov 10, 2026

Barracuda Networks Email Security Gateway (ESG) contains an authentication bypass using an alternate path or channel that could allow an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup...

Vulnerabilities & Patching