Incident response and threat intelligence firm
Appears in 1 story · Last updated Nov 6, 2026
Published advisories for both vulnerabilities
On November 6, 2026, the security research group watchTowr Labs published a working exploit chain that takes an unauthenticated attacker to root on Barracuda Email Security Gateway. The chain combines CVE-2026-116606, a pre-authentication authorization bypass rated 9.3, with CVE-2026-111560, an OS command injection rated 8.6 that also affects five other Barracuda product lines.
Updated 2 hours ago
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
