Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access

Barracuda has disclosed details regarding two vulnerabilities that, when chained together, allow attackers to bypass authorization controls and achieve root access on vulnerable appliances. The issue combines a pre-authentication authorization bypass with a command injection flaw (CVE-2026-116606) carrying a high CVSS score. Administrators should apply patches immediately to prevent potential compromise.