Tag

Email Security Gateway

All articles tagged with #email security gateway

security1 day ago•10 min saved

Barracuda Patches Critical Chain Granting Unauthenticated Root Access on Email Security Gateway

Barracuda has released patches for two vulnerabilities that can be chained to achieve unauthenticated root access on its Email Security Gateway (ESG). CVE-2026-116606 is a pre-authentication authorization bypass, while CVE-2026-111560 is an OS command injection flaw. According to watchTowr Labs, the authorization bypass allows attackers to trigger backup restore functions without valid credentials. This process executes a command injection vulnerability as root, enabling arbitrary code execution. Barracuda advises customers to update firmware immediately and restrict administrative interface access to trusted internal networks.

via watchTowr Labs|

#barracuda-networks #cve-2026-111560 #cve-2026-116606

cybersecurity1 day ago

Barracuda Patches Critical Chain Granting Unauthenticated Root Access on Email Security Gateway

Barracuda released patches for two critical vulnerabilities that can be chained to achieve unauthenticated root access on its Email Security Gateway. The first flaw, CVE-2026-116606, is an authorization bypass allowing attackers to restore crafted configuration backups. The second, CVE-2026-111560, is a command injection vulnerability that executes commands as root. While the command injection affects multiple products, it typically requires administrative access; however, the authorization bypass on the Email Security Gateway circumvents this requirement. Mandiant assigned CVSS scores of 9.3 and 8.6 to the respective flaws. Security firm watchTowr detailed the attack chain, noting that a failed password change returns a low-privilege role, exposing backup-restore functions to unauthenticated users. The restored data includes a timezone value executed as a shell command. Barracuda advises applying the patch, restricting administrative interfaces to trusted networks, and re-enabling automatic patching.

via The Hacker News|

#barracuda #cve-2026-111560 #cve-2026-116606

cybersecurity3 years ago•2 min saved

Barracuda Zero-Day Attacks: Chinese Hackers Target US Government and Telecom

Suspected Chinese hackers targeted government and government-linked organizations worldwide in a series of zero-day attacks on Barracuda Email Security Gateway (ESG). A Mandiant report revealed that almost a third of the hacked appliances belonged to government agencies, with a focus on entities across the Americas. The attacks, motivated by espionage, involved the exfiltration of data from high-profile users in government and high-tech sectors. Barracuda issued patches for the vulnerability on May 20 but later discovered that the zero-day bug had been exploited for at least seven months. The FBI warned that the patches were ineffective, and compromised devices are still being targeted. Customers are advised to replace hacked appliances and investigate their networks for potential breaches.

via BleepingComputer|

#barracuda #chinese-hackers #cybersecurity

cybersecurity3 years ago•2 min saved

Barracuda Urges Immediate Replacement of Vulnerable Email Security Appliances.

Barracuda Networks urged its Email Security Gateway (ESG) customers to replace affected appliances instead of patching them after discovering a zero-day vulnerability that allowed attackers persistent backdoor access to the devices. The company said the malware was identified on a subset of appliances, and evidence of data exfiltration was identified on some systems. Experts suggest that the malware was able to corrupt the underlying firmware that powers the ESG devices in some irreparable way, indicating a state actor. Barracuda advises customers to rotate any credentials connected to the appliance(s) and check for signs of compromise dating back to at least October 2022.

via Krebs on Security|

#barracuda-networks #cybersecurity #email-security-gateway