Hackers now exploit critical Barracuda ESG flaws to gain root access

Barracuda Networks has warned that attackers have begun exploiting two recently patched Email Security Gateway vulnerabilities that let them run commands with root privileges. One of the flaws, CVE-2026-111560, has also been added to CISA’s Known Exploited Vulnerabilities catalog.