Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access

The Hacker News · Tuesday, 3 November 2026 at 15:59 (10h ago) · Original article ↗

Barracuda has disclosed details of two vulnerabilities affecting its products that, if chained together, could allow an attacker to bypass authorization controls and gain root access to a susceptible device.

The vulnerabilities, a pre-authentication authorization bypass vulnerability and a command injection vulnerability, have been assigned the CVE identifiers CVE-2026-116606 (CVSS score: 9.3)

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

Hackers hijack cPGuard autoupdate to deploy backdoor, steal data

Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script. [...]

BleepingComputer 4h ago

Security

North Korean fake job interview led to $6.3B Binance heist

'It was not a single isolated breach or a simple phishing incident,' exchange says

The Register 4h ago

Security

Binance says hackers used fake job interviews and an internal AI tool to pull off the $6.3 billion heist

The largest crypto theft to date was pulled off by combining some well-known hacking techniques over the course of a few months, according to Binance. A postmortem from the company says the process started in June with one developer downloading a tampered installer apparently…

The Verge 4h ago

Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access

More Security & Privacy

Hackers hijack cPGuard autoupdate to deploy backdoor, steal data

North Korean fake job interview led to $6.3B Binance heist

Binance says hackers used fake job interviews and an internal AI tool to pull off the $6.3 billion heist