Barracuda patches two root-access flaws across multiple security appliances
Barracuda Networks has released patches for two vulnerabilities, CVE-2026-116606 and CVE-2026-111560, affecting its Email Security Gateway and several other products including its Load Balancer ADC, Message Archiver, WAF Control Center, Web Application Firewall, and Web Security Gateway. Chained together, the flaws could let an attacker with access to a device's administrative interface bypass authorization controls and gain root access.