Veille CyberInfra — Veille cybersecurite : OpenSSH flaw lets attackers log into password-disabled Linux accounts Veille CyberInfra — Veille cybersecurite : Chainalysis says breach exposed credentials for all customers Veille CyberInfra — Veille cybersecurite : Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login Veille CyberInfra — Veille cybersecurite : Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs Veille CyberInfra — Veille cybersecurite : Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts Veille CyberInfra — Veille cybersecurite : Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users’ Computers Veille CyberInfra — Veille cybersecurite : OpenSSH flaw lets attackers log into password-disabled Linux accounts Veille CyberInfra — Veille cybersecurite : Chainalysis says breach exposed credentials for all customers Veille CyberInfra — Veille cybersecurite : Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login Veille CyberInfra — Veille cybersecurite : Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs Veille CyberInfra — Veille cybersecurite : Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts Veille CyberInfra — Veille cybersecurite : Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users’ Computers

Veille cybersecurite : Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login

06/11/2026

Source : The Hacker News

Two flaws in Barracuda’s Email Security Gateway, an email-filtering appliance, can be chained to run commands on it as root, its highest level of access, with no login required.

The company released patches on Monday, and the security firm watchTowr detailed the attack chain on Thursday.

One flaw, CVE-2026-116606, is an authorization bypass. An unauthenticated attacker can use it to restore a

Lire l’article original

Vous vous demandez si votre entreprise est exposee a ce type de faille ? Reservez un appel decouverte gratuit.

← Retour au blog