{"revision":"ff5d0feb8c10491b88ea311bef64e2a0","evidence":{"cve":"CVE-2026-116606","kev":{"cve":"CVE-2026-116606","product":"Barracuda Email Security Gateway (ESG)","name":"Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2026-11-10","dueDate":"2026-11-13","knownRansomwareUse":false,"shortDescription":"Barracuda Networks Email Security Gateway (ESG) contains an authentication bypass using an alternate path or channel that could allow an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s global configuration. This vulnerability can be chained with CVE-2026-111560.","vendor":"Barracuda Networks","isMicrosoft":false,"products":[],"advisoryUrl":"https://trust.barracuda.com/security/pre-authentication-authorization-bypass-command-injection","publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-116606","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-116606"},"epss":null,"observedAt":"2026-11-10T20:24:10.8656273+00:00","kevRetained":false,"reviewIdentity":"93ec080c91ac52633b345af5"}}