Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access

Summary

Barracuda has disclosed details of two vulnerabilities affecting its products that, if chained together, could allow an attacker to bypass authorization controls and gain root access to a susceptible device. The vulnerabilities, a pre-authentication authorization bypass vulnerability and a command injection vulnerability, have been assigned the CVE identifiers CVE-2026-116606 (CVSS score: 9.3)

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.