In a recent cybersecurity alert, threat actors have begun exploiting two newly patched vulnerabilities found in Barracuda products. These security flaws, if combined, can bypass authorization controls and potentially allow attackers to obtain root access.
Understanding the Barracuda Vulnerabilities
The first vulnerability, identified as CVE-2026-116606 with a CVSS score of 9.3, is an authentication bypass issue in the Barracuda Email Security Gateway (ESG). This flaw can be triggered by an attacker with access to the administrative user interface, enabling them to restore a manipulated backup and alter the device configuration.
The second vulnerability, CVE-2026-111560, scoring 8.6 on the CVSS scale, involves command injection. This affects various Barracuda products, including Load Balancer Application Delivery Controller, Web Application Firewall, and others. An attacker exploiting this flaw could execute OS commands with root privileges by injecting them through an administrative interface.
Impact and Response
According to Barracuda, combining these vulnerabilities could let attackers bypass authorization and gain root-level control of the affected devices. On November 2, the company highlighted this risk and updated its advisory a week later to confirm active exploitation incidents.
On Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) added these vulnerabilities to its Known Exploited Vulnerabilities catalog. Federal agencies have been urged to patch these flaws within three days as per BOD 26-04, underscoring the critical nature of these security weaknesses.
Call to Action for Organizations
Cybersecurity firm Previdian has reported multiple attempts to exploit these vulnerabilities, with attacks originating from various countries. Organizations are strongly advised to ensure their Barracuda products are updated promptly and that administrative interfaces are shielded from internet exposure, limited to trusted internal networks only.
As the cybersecurity landscape continues to evolve, staying vigilant and proactive in applying security patches is essential to safeguard against potential threats.
For further information on related security updates, organizations can refer to recent patches by companies like Microsoft and Adobe, addressing a wide array of vulnerabilities across their platforms.
