Known Exploited Vulnerabilities November 10, 2026 · CISA KEV Catalog

CVE-2026-116606: Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability

Barracuda Networks Email Security Gateway (ESG) contains an authentication bypass using an alternate path or channel that could allow an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s global configuration. This vulnerability can be chained with CVE-2026-111560.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: Barracuda Networks CVE-2026-116606
Related: CISA Adds Six Known Exploited Vulnerabilities to Catalog Cyber Risks · Nov 10, 2026
CVE-2026-111560: Barracuda Networks Multiple Products OS Command Injection Vulnerability Known Exploited Vulnerabilities · Nov 10, 2026
CVE-2023-2868: Barracuda Networks ESG Appliance Improper Input Validation Vulnerability Known Exploited Vulnerabilities · May 26, 2023