Security · High impactFan score 69 · Tier A6 sources

Recently Patched Barracuda Vulnerabilities Exploited in Attacks

SecurityWeek · By Ionut Arghire · 3h ago

The Brief · written from 6 sources

Barracuda warned that attackers have started exploiting two recently patched Email Security Gateway (ESG) vulnerabilities.
The flaws are a pre-authentication authorization bypass and a command-injection bug that, when chained, let attackers run commands with root privileges.
The sources describe the flaws as critical and say they are being exploited in the wild.

Why it matters

Email gateways sit at the edge of an organisation's mail flow, so root access on one exposes mail traffic and internal systems. Teams running Barracuda ESG should verify they have the fixes applied.

Who’s affected

Organizations running Barracuda Email Security Gateway (ESG)

What to do

Apply Barracuda's patches for the two recently fixed ESG vulnerabilities
Check ESG appliances for signs of compromise

#barracuda
#email-security
#vulnerability
#privilege-escalation
#exploited-in-the-wild

The security defects could allow attackers to bypass authorization and gain root access to devices. The post Recently Patched Barracuda Vulnerabilities Exploited in Attacks appeared first on SecurityWeek .

Read the full story at securityweek.com ↗