# Barracuda patches flaws that can combine to grant root access

_Published Tuesday, November 3, 2026 at 10:56 AM EST · Security · Latest · Tier 2 — Notable_

![Barracuda patches flaws that can combine to grant root access — Primary](https://www.bleepstatic.com/content/hl-images/2026/11/03/Barracuda.jpg)

Barracuda Networks warned customers to patch two vulnerabilities that can combine to give attackers root access to affected appliances. CVE-2026-116606 involves an Email Security Gateway authentication weakness that permits global configuration changes. CVE-2026-111560 allows an attacker with administrator permissions to inject operating-system commands that run as root.

The command-injection flaw also affects several other Barracuda products, including load balancers, message archivers and web security appliances. Barracuda released patches and advised customers to restrict administrative interfaces to trusted internal networks. Exploitation requires access to those interfaces.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/barracuda-warns-of-critical-flaws-allowing-root-access-to-devices/)

---
Canonical: https://techandbusiness.org/newswire/li4SsI3WPj7_tO2KwiMHQg
Published: 2026-11-03T15:56:46.512Z
Story chronology: 2026-11-03T15:06:16.000Z
Retrieved: 2026-11-03T18:26:17.567Z
Publisher: Tech & Business (techandbusiness.org)