CybersecurityUpdated Yesterday

Barracuda warns attackers are exploiting patched ESG flaws

Barracuda says attackers have begun exploiting two recently patched vulnerabilities in its Email Security Gateway (ESG), which can let them run commands with root privileges. The route to root depends on chaining an authorization bypass with command injection, not on either flaw working alone. An attacker still needs to reach the affected product’s administrative interface, and Barracuda says patches are available. That interface remains a necessary step in the attack path.

1 publisher1 report

Coverage started Yesterday