CVE-2026-116606 — Vulnerability intelligence
Barracuda Networks — Barracuda Email Security Gateway (ESG)
Published:
- CVSS
- 9.3
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s global configuration.