CVE-2026-116606
Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s global configuration.
| CWE | CWE-288 |
| Vendor | barracuda networks |
| Product | barracuda email security gateway (esg) |
| Published | Nov 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for barracuda networks barracuda email security gateway (esg)
Be the first to know when new unknown vulnerabilities affecting barracuda networks barracuda email security gateway (esg) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Barracuda Networks / Barracuda Email Security Gateway (ESG)
0 < 9.4.0.030