CVE-2026-116606

Vendor

Barracuda

Product

Barracuda Email Security Gateway (ESG)

CVSS v4.0

9.3 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-288

Exposure class

Email

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 45
   CVE NVD 3h ago

   An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a…

   An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive…

   CVSS 9.3 CVE-2026-116606 Barracuda