Barracuda ESG Authentication Bypass Flaw Opens Path to Root
Teaser from the source
An authentication bypass and a command injection flaw can be chained for root access on Barracuda’s Email Security Gateway appliances. The post Barracuda ESG Authentication Bypass Flaw Opens Path to Root appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekMore on Authentication
Other advisories
- HighCVE-2026-111493Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint, which allows profile photos to be downloaded using predictable identifier…
- HighCVE-2026-94395Thalesgroup Safenet Authentication Client SIS token engine: Stack-basierter Pufferüberlauf
- MediumCVE-2026-112110Thalesgroup Safenet Authentication Client Service: Folgen symbolischer Links (Link Following)
- HighCVE-2026-112109Thalesgroup Safenet Authentication Client Service: Heap-basierter Pufferüberlauf
- HighCVE-2026-94395Thalesgroup Safenet Authentication Client SIS token engine: Stack-basierter Pufferüberlauf
- MediumCVE-2026-112110Thalesgroup Safenet Authentication Client Service: Folgen symbolischer Links (Link Following)
- HighCVE-2026-112109Thalesgroup Safenet Authentication Client Service: Heap-basierter Pufferüberlauf
- HighCVE-2026-123158Alpine Linux sshd password authentication bypass lets anyone log in to key-only accounts (CVE-2026-123158)
Other news entries
- OpenSSH flaw lets attackers access password-disabled accounts on some Linux systemsNewsCSO Online
- Fake OpenAI, SpaceX events used to steal Microsoft, Google accountsNewsBleepingComputer
- OpenSSH flaw lets attackers log into password-disabled Linux accountsNewsBleepingComputer
- Closing the Identity Gap at the Service DeskNewsBleepingComputer
- Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS FlawsNewsSecurityWeek
- 5 Active Cyber Threats That Put US Enterprises at Risk in October 2026NewsThe Hacker News
- mSecure password manager hack prompts password reset warningsNewsBleepingComputer
- Node-RED authentication hole being exploited in the wildNewsCSO Online
ID