Barracuda Networks Barracuda Email Security Gateway (ESG): Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Level
- Minor (1/5)
- Command
- CYBERCOM
- Region
- Cyber
- Category
- Cyber threat
- Source
- CISA Known Exploited Vulnerabilities
Cyber ThreatMinor (1/5)Official statement28th Cyber threat alert in the last 30 days
At a glance
- What
- Cyber Threat
- Who
- CISA Known Exploited Vulnerabilities
- When
- Nov 10, 2026 at 12:00 AM UTC
- Pace
- 28th Cyber threat alert at severity 1+ in the last 30 days
Official Statements
CISA Known Exploited Vulnerabilities, November 10: “Barracuda Networks Email Security Gateway (ESG) contains an authentication bypass using an alternate path or channel that could allow an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s global configuration. This vulnerability can be chained with CVE-2026-111560.”
Source: CISA Known Exploited Vulnerabilities
