Comments on No. 92 of 109 · watchTowr Labs · edition of Friday 6 November 2026

Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560)

Summary

watchTowr Labs published research on two Barracuda Email Security Gateway flaws, CVE-2026-116606 (pre-authentication authorization bypass, CVSS 9.3 per Barracuda) and CVE-2026-111560 (OS command injection, CVSS 8.6).

Comments

Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules