Barracuda ESG Authentication Bypass Flaw Opens Path to Root
Teaser from the source
An authentication bypass and a command injection flaw can be chained for root access on Barracuda’s Email Security Gateway appliances. The post Barracuda ESG Authentication Bypass Flaw Opens Path to Root appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekMore on Authentication
Other advisories
- CriticalCVE-2026-59104UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on TCP port 3334. When the user database co…
- CriticalCVE-2026-19868SonicWall SonicOS: Sicherheitslücke
- CriticalCVE-2026-113615GS JWT Authentication for WP REST API: unzureichende Rechteverwaltung
- CriticalCVE-2026-113615GS JWT Authentication for WP REST API: unzureichende Rechteverwaltung
- HighCVE-2026-111493Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint, which allows profile photos to be downloaded using predictable identifier…
- HighCVE-2026-94395Thalesgroup Safenet Authentication Client SIS token engine: Stack-basierter Pufferüberlauf
- MediumCVE-2026-112110Thalesgroup Safenet Authentication Client Service: Folgen symbolischer Links (Link Following)
- HighCVE-2026-112109Thalesgroup Safenet Authentication Client Service: Heap-basierter Pufferüberlauf
Other news entries
- SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacksNewsBleepingComputer
- OpenSSH Rushes Patches for ‘SSHole’ Authentication BypassNewsSecurityWeek
- OpenSSH flaw lets attackers access password-disabled accounts on some Linux systemsNewsCSO Online
- Fake OpenAI, SpaceX events used to steal Microsoft, Google accountsNewsBleepingComputer
- OpenSSH flaw lets attackers log into password-disabled Linux accountsNewsBleepingComputer
- Closing the Identity Gap at the Service DeskNewsBleepingComputer
- Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS FlawsNewsSecurityWeek
- 5 Active Cyber Threats That Put US Enterprises at Risk in October 2026NewsThe Hacker News
ID