# SZB-40f3a46406: Barracuda warns attackers are exploiting two patched ESG root-access flaws

Barracuda Networks warned that attackers have begun exploiting two recently patched Email Security Gateway vulnerabilities. The flaws let attackers run commands with root privileges, according to the company's warning as reported by BleepingComputer.

- Type: Early warning
- Kind: Vulnerability
- Vendor: Barracuda
- Product: Email Security Gateway
- Status: Reported, not confirmed
- Sources: 1 distinct
- First seen: 2026-11-10 10:12 UTC

> No statement or filing from Barracuda has reached cve.now yet. Every claim below is quoted from, and linked to, the source that made it.

Written by a model from the sources below. Verify against them.

## What to do

- Apply the latest Email Security Gateway patches immediately
- Check ESG appliances for unauthorized root-level command execution
- Review appliance logs for suspicious activity since the flaws were disclosed

## Timeline

- 2026-11-10 10:10 UTC: Made public by BleepingComputer
- 2026-11-10 10:12 UTC: First seen by cve.now

## Evidence (1 source)

- 2026-11-10 · Press · [BleepingComputer](https://www.bleepingcomputer.com/news/security/hackers-exploit-barracuda-email-security-gateway-flaws-to-get-root-access/): “Cybersecurity company Barracuda Networks warned that attackers have begun exploiting two recently patched Email Security Gateway (ESG) vulnerabilities that let them run commands with root privileges.” (+1 more: [BleepingComputer on Bluesky](https://bsky.app/profile/bleepingcomputer.com/post/3mzx7c2wepm2h))

## Corrections

None so far.

Something wrong on this page? Report an error: https://github.com/sazabi/cve.now/issues/new?title=Wrong%20fact%20on%20SZB-40f3a46406&body=https%3A%2F%2Fcve.now%2FSZB-40f3a46406%0A%0AWhat%20is%20wrong%2C%20and%20the%20source%20that%20shows%20it%3A%0A

## Questions about SZB-40f3a46406

### Has Barracuda confirmed it?

BleepingComputer reports it. No statement from Barracuda has reached cve.now yet.

Source: https://www.bleepingcomputer.com/news/security/hackers-exploit-barracuda-email-security-gateway-flaws-to-get-root-access/

### What should Barracuda users do?

Apply the latest Email Security Gateway patches immediately. Check ESG appliances for unauthorized root-level command execution. Review appliance logs for suspicious activity since the flaws were disclosed.

## Related

- Browse: [Early warnings](https://cve.now/early-warnings.md)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/SZB-40f3a46406
Site guide for agents: https://cve.now/llms.txt