From Dev.to
CVE-2026-116606 + CVE-2026-111560: How a Predictable Secret Turns Two Barracuda Bugs Into a Root Shell
Barracuda disclosed two flaws on November 2. By November 10, they were being exploited. CVE-2026-116606 (CVSS 9.3) — pre-auth bypass in ESG. An unauthenticated attacker invokes the configuration-impor...