Occurred Nov 10, 2026, 12:00:00 AM UTC

First published Nov 11, 2026, 1:31:15 AM UTC · Last updated Nov 11, 2026, 1:31:15 AM UTC

CVE-2026-116606: Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability

Reported by CISA Known Exploited Vulnerabilities

The excerpt reports an authentication-bypass vulnerability in Barracuda Networks Email Security Gateway that could let an unauthenticated remote attacker modify the appliance’s global configuration, and says it can be chained with CVE-2026-111560. It directs users to apply vendor mitigations or discontinue use if mitigations are unavailable.

Share this event

Follow: Events in United States

Manage follows

Why it matters

The stated mitigation or discontinuation action addresses a vulnerability that could permit unauthorized modification of an appliance’s global configuration.

Generated scores

Scores are based on the cited reporting and use a 1–10 scale. Read the methodology.

Confidence: 5/10How certain the assessment is based on the clarity and evidence in the cited reporting.
Geographic reach: 2/10How widely the event reaches, from a local area (1) to worldwide impact (10).
Global importance: 2/10The event's broader significance, from limited importance (1) to major global importance (10).
Impact magnitude: 3/10The scale or severity of the real-world impact, from minor (1) to extreme (10).
Urgency: 5/10How time-sensitive the event is, from low urgency (1) to immediate attention needed (10).

Primary official sources

CISA Known Exploited Vulnerabilities CVE-2026-116606: Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability

Report an issue

Read our editorial process and corrections policy.

Continue exploring

Related developments reported in the last 30 days. These are not necessarily ongoing incidents.

Same topic
Hundreds march in Gibraltar against Pelagos data center plan and demand transparencyNov 11, 2026, 10:46 AM UTC
A demonstration took place at Casemates Square in Gibraltar against ongoing construction projects and the proposed mega data center. Participants demanded transparency.
Same topic
In Ukraine, youth are finding their voices in the digital democracyNov 10, 2026, 7:49 PM UTC
We saw a gap: young people were consuming information and even participating online, but without media literacy, digital security awareness, or confidence that their voice could shape anything.
Same topic
Sudan war: First ‘suicide’ drone attacks, now long-range strikes are the normNov 10, 2026, 12:00 PM UTC
UNICEF described drone attacks on Sudan’s infrastructure, including long-range strikes. Additional details about effects or specific locations were not included in the source data received by Planet Briefing.
Same topic
UK with eyes from space: launches its second military satellite, TitaniaNov 10, 2026, 10:44 AM UTC
The excerpt reports the successful launch of the British-built military satellite Titania from California on a SpaceX rocket. It says the satellite will help the UK Armed Forces observe military activity from space.
Same topic
RN inaugurates “hybrid navy” with its First Autonomous Squadron of un-crewed boatsNov 10, 2026, 2:47 AM UTC
The excerpt reports a newly formed Royal Navy unit for autonomous boats, with 28-foot craft based at Portsmouth Naval Base.
Same topic
CVE-2026-125350: Google Chromium Use-After-Free VulnerabilityNov 10, 2026, 12:00 AM UTC
The source describes a use-after-free vulnerability in Chromium’s XML component that could allow remote code execution inside the sandbox via a specially crafted webpage. It says Chromium-based browsers may be affected and calls for mitigations in accordance with vendor instructions and applicable CISA guidance.

Loading related developments…

Explore events in united states