Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access

Barracuda has disclosed two vulnerabilities that, chained together, could let an attacker bypass authorization controls and gain root access to a susceptible device, The Hacker News reports. The flaws are a pre-authentication authorization bypass and a command injection vulnerability, including CVE-2026-116606, rated CVSS 9.3.