#email security gateway

Exploited Barracuda ESG Flaws CVE-2026-116606 Can Be Chained

CISA flags two exploited Barracuda flaws: an ESG auth bypass (CVE-2026-116606) and a root command injection (CVE-2026-111560) that attackers can chain.