Security · 8 November 2026
Barracuda patches critical root‑access chain in Email Security Gateway
Two flaws (CVE‑2026‑116606 auth bypass and CVE‑2026‑111560 command injection) can be chained to gain root on Barracuda Email Security Gateway; patches released, fixing version 9.4.0.030+.
Why it matters
Ensure product onboarding checks firmware version 9.4.0.030 or later; customers will expect devices to be patched against root‑access chain.
For product managers
For your product
What does this mean for your product?
Try it on your product More from this issueAll AI news from 8 Nov →
Get this every morning, written for your product.
Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.