Barracuda Email Security Gateway flaws prompt root-access warnings
Barracuda has confirmed that security flaws in its Email Security Gateway, also known as ESG, are being actively exploited. The company said on November 9, 2026, in an update issued at 9:00 p.m. EST that the activity affected a small number of organizations, and that attackers could combine two vulnerabilities to gain root access without logging in. Exposure at the management interface The two tracked issues are CVE-2026-116606 and CVE-2026-111560.…