Event Monitor Cyber
EM-20261103-U1N0 VulnerabilityCritical severity

Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability

CVE-2026-116606 · Barracuda Networks Barracuda Email Security Gateway (ESG)

Share

191 hours from first report to confirmed exploitation.

Status
Confirmed

Since : CISA added it to Known Exploited Vulnerabilities.

First Signal
Nov 02 13:17 UTCC6 NVD CVE API 2.0
Page Born
Nov 03 15:59 UTCsecond source joined
Last Signal
Nov 10 12:00 UTC14 hours before snapshot
Sources
72 official · 5 research, news or crowd
Open For
8 daysso far

Life Of This Page

  1. 1
    Born
    A second, independent source names it.
  2. 2
    Developing
    New signals join; severity can move.
  3. 3
    Confirmed · Now
    CISA KEV lists it, or exploitation in the wild is reported.
  4. 4
    Resolved
    Not yet
    Past the fix deadline and 14 days with no new signal.
  5. 5
    Archived
    Not yet
    30 days after resolved. Read only; the link keeps working. Reopens if it comes back.

The ID never changes, and earlier addresses keep working. A correction is logged, never overwritten. If two pages turn out to be one incident, the later one points to the earlier.

Vulnerability Lifecycle

  1. Disclosed: reached
    Nov 02 13:17 UTC
    C6 NVD published
  2. Scored: reached
    Nov 02 13:17 UTC
    CVSS 9.3 · EPSS 0.7%
  3. Exploited: reached
    Nov 10 12:00 UTC
    C1 CISA KEV, fix by Nov 13
  4. Advisories: reached
    Nov 04 09:41 UTC
    1 government and CERT sources
  5. Vendor Response: not yet
    Not yet
    None in sources yet
  6. Resolved: not yet
    Not yet
    When fixed: KEV deadline Nov 13, then 14 quiet days

Timeline

Nov 3Nov 4Nov 5Nov 6Nov 7Nov 8Nov 9Nov 10BornConfirmedC6 NVD CVE API 2.0C130 The Hacker NewsC15 NCSC-NLC160 Reddit r/netsecC34 ProjectDiscovery nuclei-templateC171 GBHackersC1 CISA Known Exploited Vulnerabilit

Point at a mark to read it. Squares are signals, colored by severity; every one is also listed under Signals.

Signals

  1. CVE-2026-116606 added to KEV: Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability (opens source in a new tab) Barracuda Networks Email Security Gateway (ESG) contains an authentication bypass using an alternate path or channel that could allow an unauthenticated remote attacker to invoke a configuration-import function and… High severityExploited ListC1 CISA Known Exploited Vulnerabilities
  2. CVE-2026-111560 added to KEV: Barracuda Networks Multiple Products OS Command Injection Vulnerability (opens source in a new tab) Barracuda Networks Email Security Gateway (ESG), Load Balancer, Application Delivery Controller (ADC), Message Archiver (BMA), WAF Control Center (WCC), Web Application Firewall (WAF), and Web Security Gateway (WSG)… High severityExploited ListC1 CISA Known Exploited Vulnerabilities
  3. Barracuda Email Security Gateway Flaws Allow Unauthenticated Attackers to Execute Commands as Root (opens source in a new tab) Two critical security vulnerabilities in Barracuda Email Security Gateway (ESG) could let unauthenticated attackers bypass authentication and run operating system commands as root. The vulnerabilities, tracked as… Med severityResearch & NewsC171 GBHackers
  4. ProjectDiscovery nuclei-templates: Merge pull request #17715 from projectdiscovery/CVE-2026-116606 (opens source in a new tab) Merge pull request #17715 from projectdiscovery/CVE-2026-116606 CVE-2026-116606 - Barracuda Email Security Gateway - Authentication Bypass Med severityResearch & NewsC34 ProjectDiscovery nuclei-templates
  5. Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login (opens source in a new tab) Two flaws in Barracuda's Email Security Gateway, an email-filtering appliance, can be chained to run commands on it as root, its highest level of access, with no login required. The company released patches on Monday… Med severityResearch & NewsC130 The Hacker News
  6. Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560) - watchTowr Labs (opens source in a new tab) submitted by /u/dx7r__ to r/netsec [link] [comments] Info severityCrowdC160 Reddit r/netsec
  7. NCSC-2026-0465 [1.00] [M/H] Kwetsbaarheden verholpen in Barracuda Email Security Gateway (opens source in a new tab) Barracuda heeft kwetsbaarheden verholpen in Barracuda Email Security Gateway. Barracuda heeft twee kwetsbaarheden vastgesteld in verschillende Barracuda-producten: een kwetsbaarheid voor het omzeilen van… Med severityGovernmentC15 NCSC-NL
  8. Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access (opens source in a new tab) Barracuda has disclosed details of two vulnerabilities affecting its products that, if chained together, could allow an attacker to bypass authorization controls and gain root access to a susceptible device. The… Med severityResearch & NewsC130 The Hacker News
  9. CVE-2026-116606 (CVSS 9.3) (opens source in a new tab) An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup… Crit severityDatabaseC6 NVD CVE API 2.0