Vendors and CVEs › CVEs › CVE-2026-116606
CVE-2026-116606: what it is, who is affected and what to do
Barracuda says attackers are exploiting two flaws in its Email Security Gateway (ESG). Chained, they allow commands to run with root privileges. The vendor reports a small number of affected organisations and has released patches. CVE-2026-116606 is rated 9.3.
- Scores and exploitation. The stories below cover this flaw together with others, so the Brief does not give its scores here: check the records below.
- Records. CVE-2026-116606 on the National Vulnerability Database · CISA’s known exploited catalog
The story
Critical Known exploited
Barracuda email gateways under attack through chained flaws
Barracuda says attackers are exploiting two flaws in its Email Security Gateway (ESG). Chained, they allow commands to run with root privileges.