Security
Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login
The Hacker News·November 6, 2026·1 min read
Two flaws in Barracuda's Email Security Gateway can be chained to run commands as root with no login required. Barracuda released patches Monday; security firm watchTowr detailed the attack chain Thursday. One flaw, CVE-2026-116606, is an authorization bypass that lets an unauthenticated attacker restore a component, enabling the chain to root access.
Read at The Hacker NewsDaily crypto arcade
Read the news, then play it.
Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.