CVE-2026-116606

— UNSCOREDpublic exploit available

Published 2026-11-02 · Updated 2026-11-03

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s global configuration.

Weaknesses

CWE-288

Public exploit & PoC references

https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0042.md

All references

https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0042.md
https://trust.barracuda.com/security/pre-authentication-authorization-bypass-command-injection

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-100261
MEDIUMCVE-2026-100518
CRITICALCVE-2026-104075
MEDIUMCVE-2026-106601
MEDIUMCVE-2026-106602
UNSCOREDCVE-2026-107194
MEDIUMCVE-2026-107254
MEDIUMCVE-2026-107261

Related by shared AI tags and CWE weakness class. Browse the full archive.