Skip to main content
cve.nowby Sazabi
← Early warnings
SZB-40f3a46406Early warningVulnerabilityReported, not confirmed

Barracuda warns attackers are exploiting two patched ESG root-access flaws

Barracuda Networks warned that attackers have begun exploiting two recently patched Email Security Gateway vulnerabilities. The flaws let attackers run commands with root privileges, according to the company's warning as reported by BleepingComputer.

Written by a model from the sources below. Verify against them.

Sources1Reported, not confirmed
Kind
Vulnerability
Vendor
Barracuda
Product
Email Security Gateway
Status
Reported, not confirmed
First seen

What to do

  • Apply the latest Email Security Gateway patches immediately

  • Check ESG appliances for unauthorized root-level command execution

  • Review appliance logs for suspicious activity since the flaws were disclosed

Timeline

  1. Made public by BleepingComputer
  2. First seen by cve.now

Evidence 1

  1. Press
    BleepingComputer
    “Cybersecurity company Barracuda Networks warned that attackers have begun exploiting two recently patched Email Security Gateway (ESG) vulnerabilities that let them run commands with root privileges.”
    +1 more: BleepingComputer on Bluesky

Corrections

None so far.

Something wrong on this page? Report an error. Every fix is listed here.

Questions about SZB-40f3a46406

Has Barracuda confirmed it?

BleepingComputer reports it. No statement from Barracuda has reached cve.now yet.Source: BleepingComputer

What should Barracuda users do?

Apply the latest Email Security Gateway patches immediately. Check ESG appliances for unauthorized root-level command execution. Review appliance logs for suspicious activity since the flaws were disclosed.

Sources