Attackers exploit two Barracuda ESG flaws to gain root access
Barracuda Networks said attackers are exploiting CVE-2026-116606 and CVE-2026-111560 against a limited number of Email Security Gateway customers. The company advised administrators to apply the available patches, restrict the Admin UI to trusted internal networks and restore automatic patching if it was disabled.