Tech article
Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login - The Hacker News
Publisher description: Two patched Barracuda Email Security Gateway flaws can be chained to execute root commands without authentication, watchTowr demonstrated.
NewsAPI | Nov 6, 2026 | The Hacker News
Automated excerpt
It runs commands as root but normally needs an administrator account, and on the Email Security Gateway the bypass gives an attacker that access. The authorization bypass affects only the Email Security Gateway. The Email Security Gateway is fixed in version 9.4.0.030 and later.
Selected automatically from source text; not independently written or fact-checked. Read the original for full context.