CVE-2026-116606

Published 10 November 2026 · tracked since 10 November 2026

Description

Barracuda Networks Email Security Gateway (ESG) contains an authentication bypass using an alternate path or channel that could allow an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-124604 MEDIUM 6.2
• CVE-2026-124603 MEDIUM 6.2
• CVE-2026-124602 MEDIUM 6.2
• CVE-2026-124601 MEDIUM 6.2
• CVE-2026-124599 MEDIUM 6.2
• CVE-2026-124598 HIGH 7.5
• CVE-2026-109810 MEDIUM 6.1
• CVE-2026-109799 HIGH 7.5
• CVE-2026-109797 HIGH 7.1
• CVE-2026-107244 HIGH 7.6

→ Open the live CVE board · all tools