Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access

Barracuda disclosed two vulnerabilities that, chained together, could let an attacker bypass authorization and gain root access to affected devices. The flaws include a pre-authentication authorization bypass and a command injection vulnerability, tracked as CVE-2026-116606 with a CVSS score of 9.3. Barracuda has not yet released patches for the issues.