poslední zpráva
SPOJENO AI EPSS 0.01 (nejvyšší)
Barracuda warns of critical flaws allowing root access to devices
Cybersecurity company Barracuda Networks warned customers to patch two vulnerabilities that can let attackers run commands with root privileges. [...]
Barracuda Barracuda Networks NL FI US CA
CVE v události 2
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-111560 | 8.6 4.0 · Mandiant | – | < 0.01 |
| CVE-2026-116606 | 9.3 4.0 · Mandiant | – | 0.01 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.3.
Tahle CVE jsem vytáhl z širšího textu článku: CVE-2023-2868, CVE-2023-7102. Neukazuju u nich proto fakta z katalogů výše, a to preventivně, protože článek se na ně mohl jen odkazovat, třeba jako na starší kauzu.
Jak se o tom psalo 4
-
· NCSC-NL NL
NCSC-2026-0465 [1.00] [M/H] Kwetsbaarheden verholpen in Barracuda Email Security Gateway
Barracuda heeft kwetsbaarheden verholpen in Barracuda Email Security Gateway. Barracuda heeft twee kwetsbaarheden vastgesteld in verschillende Barracuda-producten: een kwetsbaarheid voor het omzeilen van autorisatiecontroles (CVE-2026-116606) en een kwetsbaarheid voor command injection (CVE-2026-111560). De eerste kwetsbaarheid betreft een pre-authentication authorization bypass in Barracuda Email Security Gateway (ESG). De tweede kwetsbaarheid betreft command injection en treft naast ESG ook…
-
· zachyceno · NCSC-FI FI
Vulnerabilities in Barracuda products
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 9.3, CVEs: CVE-2026-111560, CVE-2026-116606, Summary: CVE-2026-111560 (CVSS: 8.6): Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently processed. CVE-2026-116606 …
-
· BleepingComputer US nadpis události
Barracuda warns of critical flaws allowing root access to devices
Cybersecurity company Barracuda Networks warned customers to patch two vulnerabilities that can let attackers run commands with root privileges. [...]
-
· Cyber Centre Kanada CA
Barracuda Networks security advisory (AV26-1112)
Serial Number: AV26-1112 Date: November 2, 2026 As of November 2, 2026, Barracuda Networks is affected by a vulnerability in the following products: Barracuda Email Security Gateway (ESG) Prior to 9.4.0.030 Barracuda Load Balancer Application Delivery Controller (ADC) Prior to 6.4.0 Barracuda Web Application Firewall (WAF) Prior to 11.0.1 Barracuda Web Security Gateway (WSG) Prior to 16.1.100.100 Barracuda Message Archiver (BMA) Prior to 5.5.4.0 Barracuda WAF Control Center (WCC) Prior to 2.2.1…