[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fA1NmyMIzVINmAhQjLHJzMOqTP039SY5RYOiJulDsi6Q":3,"g5a-risk:CVE-2026-116606":209},{"success":4,"data":5,"meta":206},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":29,"epssTimeSeries":42,"severity":45,"affectedProducts":46,"affectedProductsCount":81,"references":82,"referencesCount":98,"weaknesses":99,"weaknessesCount":108,"isActivelyExploited":4,"cisaInfo":109,"otxData":29,"relatedBlogPosts":110,"seoMetadata":111,"configurations":136,"relatedVendorCves":190,"notableEvents":191},"CVE-2026-116606","What is CVE-2026-116606?","An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s global configuration.","An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configurat...","2026-11-02T13:17:37.017","2026-11-12T11:34:22.65",9.3,"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"CVSSMetricV31":15,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":34},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"nvd@nist.gov","Primary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NETWORK","LOW","NONE","UNCHANGED","HIGH",9.8,"CRITICAL",null,3.9,5.9,[],[],[35],{"Source":36,"Type":37,"CVSSData":38},"mandiant-cve@google.com","Secondary",{"Version":39,"VectorString":13,"BaseScore":12,"BaseSeverity":28,"AttackVector":22,"AttackComplexity":23,"AttackRequirements":24,"PrivilegesRequired":24,"UserInteraction":24,"VulnConfidentialityImpact":26,"VulnIntegrityImpact":26,"VulnAvailabilityImpact":26,"SubConfidentialityImpact":24,"SubIntegrityImpact":24,"SubAvailabilityImpact":24,"ExploitMaturity":40,"ConfidentialityRequirement":40,"IntegrityRequirement":40,"AvailabilityRequirement":40,"ModifiedAttackVector":40,"ModifiedAttackComplexity":40,"ModifiedAttackRequirements":40,"ModifiedPrivilegesRequired":40,"ModifiedUserInteraction":40,"ModifiedVulnConfidentialityImpact":40,"ModifiedVulnIntegrityImpact":40,"ModifiedVulnAvailabilityImpact":40,"ModifiedSubConfidentialityImpact":40,"ModifiedSubIntegrityImpact":40,"ModifiedSubAvailabilityImpact":40,"Safety":40,"Automatable":40,"Recovery":40,"ValueDensity":40,"VulnerabilityResponseEffort":40,"ProviderUrgency":40},"4.0","NOT_DEFINED",0.08934,[43,43,43,44,44,44,41],0.00728,0.01602,"Critical",[47,52,57,60,63,66,69,72,75,78],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"barracuda","email_security_gateway_300_firmware","*","cpe:2.3:o:barracuda:email_security_gateway_300_firmware:*:*:*:*:*:*:*:*",{"vendor":48,"product":53,"version":54,"criteria":55,"vulnerable":56},"email_security_gateway_300","-","cpe:2.3:h:barracuda:email_security_gateway_300:-:*:*:*:*:*:*:*",false,{"vendor":48,"product":58,"version":50,"criteria":59,"vulnerable":4},"email_security_gateway_400_firmware","cpe:2.3:o:barracuda:email_security_gateway_400_firmware:*:*:*:*:*:*:*:*",{"vendor":48,"product":61,"version":54,"criteria":62,"vulnerable":56},"email_security_gateway_400","cpe:2.3:h:barracuda:email_security_gateway_400:-:*:*:*:*:*:*:*",{"vendor":48,"product":64,"version":50,"criteria":65,"vulnerable":4},"email_security_gateway_600_firmware","cpe:2.3:o:barracuda:email_security_gateway_600_firmware:*:*:*:*:*:*:*:*",{"vendor":48,"product":67,"version":54,"criteria":68,"vulnerable":56},"email_security_gateway_600","cpe:2.3:h:barracuda:email_security_gateway_600:-:*:*:*:*:*:*:*",{"vendor":48,"product":70,"version":50,"criteria":71,"vulnerable":4},"email_security_gateway_800_firmware","cpe:2.3:o:barracuda:email_security_gateway_800_firmware:*:*:*:*:*:*:*:*",{"vendor":48,"product":73,"version":54,"criteria":74,"vulnerable":56},"email_security_gateway_800","cpe:2.3:h:barracuda:email_security_gateway_800:-:*:*:*:*:*:*:*",{"vendor":48,"product":76,"version":50,"criteria":77,"vulnerable":4},"email_security_gateway_900_firmware","cpe:2.3:o:barracuda:email_security_gateway_900_firmware:*:*:*:*:*:*:*:*",{"vendor":48,"product":79,"version":54,"criteria":80,"vulnerable":56},"email_security_gateway_900","cpe:2.3:h:barracuda:email_security_gateway_900:-:*:*:*:*:*:*:*",10,[83,88,93],{"url":84,"source":85,"tags":86},"https:\u002F\u002Fgithub.com\u002Fmandiant\u002FVulnerability-Disclosures\u002Fblob\u002Fmaster\u002F2026\u002FMNDT-2026-0042.md","GitHub",[87],"Third Party Advisory",{"url":89,"source":90,"tags":91},"https:\u002F\u002Ftrust.barracuda.com\u002Fsecurity\u002Fpre-authentication-authorization-bypass-command-injection","Barracuda",[92],"Vendor Advisory",{"url":94,"source":95,"tags":96},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2026-116606","CISA",[97],"US Government Resource",3,[100],{"id":101,"name":102,"description":103,"extendedDescription":104,"status":105,"abstraction":106,"structure":107},"CWE-288","Authentication Bypass Using an Alternate Path or Channel","A product requires authentication, but the product has an alternate path or channel that does not require authentication.","","Incomplete","Base","Simple",1,{"shortDescription":104,"requiredAction":104,"vulnerabilityName":104,"dateAdded":29},[],{"title":112,"metaDescription":113,"keywords":114,"canonicalUrl":115,"structuredData":116},"What is CVE-2026-116606? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2026-116606, a critical severity cyber security vulnerability from 2026. An authentication bypass in Barracuda Email Security G...","CVE-2026-116606, CVE-2026-116606 vulnerability, CVE-2026-116606 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, barracuda security, email_security_gateway_300_firmware vulnerability, email_security_gateway_300 vulnerability, email_security_gateway_400_firmware vulnerability, email_security_gateway_400 vulnerability, email_security_gateway_600_firmware vulnerability","\u002Fwhat-is\u002Fcve-2026-116606",{"@context":117,"@type":118,"headline":112,"description":113,"datePublished":10,"dateModified":11,"author":119,"publisher":123,"about":127,"mainEntityOfPage":131,"articleSection":134,"keywords":135},"https:\u002F\u002Fschema.org","TechArticle",{"@type":120,"name":121,"url":122},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":120,"name":121,"url":122,"logo":124},{"@type":125,"url":126},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":128,"name":6,"description":129,"additionalType":130},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":132,"@id":133},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2026-116606","Cybersecurity","CVE-2026-116606, CVE-2026-116606 vulnerability, CVE-2026-116606 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[137,150,160,170,180],{"Operator":138,"Negate":29,"Nodes":139},"AND",[140,146],{"Operator":141,"Negate":56,"CPEMatch":142},"OR",[143],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":144,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":145,"VersionEndIncluding":29},"454E2349-F911-44FD-A9C4-7BE721DDCA03","9.4.0.030",{"Operator":141,"Negate":56,"CPEMatch":147},[148],{"Vulnerable":56,"Criteria":55,"MatchCriteriaID":149,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"824DAE15-3628-4346-947E-C33FA46AADE6",{"Operator":138,"Negate":29,"Nodes":151},[152,156],{"Operator":141,"Negate":56,"CPEMatch":153},[154],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":155,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":145,"VersionEndIncluding":29},"BAA128A3-FF66-4E05-B31E-47F73C9C1565",{"Operator":141,"Negate":56,"CPEMatch":157},[158],{"Vulnerable":56,"Criteria":62,"MatchCriteriaID":159,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"ACD3DD62-D690-47F9-8416-61AD78B33699",{"Operator":138,"Negate":29,"Nodes":161},[162,166],{"Operator":141,"Negate":56,"CPEMatch":163},[164],{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":165,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":145,"VersionEndIncluding":29},"199B5F00-5C48-40D5-881C-D7868B0A51E8",{"Operator":141,"Negate":56,"CPEMatch":167},[168],{"Vulnerable":56,"Criteria":68,"MatchCriteriaID":169,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"6C507D86-2E68-44A4-A31C-EEF9A6BBEE54",{"Operator":138,"Negate":29,"Nodes":171},[172,176],{"Operator":141,"Negate":56,"CPEMatch":173},[174],{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":175,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":145,"VersionEndIncluding":29},"1661D779-1816-4F91-B972-BF2097B4A436",{"Operator":141,"Negate":56,"CPEMatch":177},[178],{"Vulnerable":56,"Criteria":74,"MatchCriteriaID":179,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"74D999D5-6CE5-49F7-A0C5-0B44704FEE45",{"Operator":138,"Negate":29,"Nodes":181},[182,186],{"Operator":141,"Negate":56,"CPEMatch":183},[184],{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":185,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":145,"VersionEndIncluding":29},"D1B1D8A6-5E3F-4D5A-AD0A-7C853A9B0AEB",{"Operator":141,"Negate":56,"CPEMatch":187},[188],{"Vulnerable":56,"Criteria":80,"MatchCriteriaID":189,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"FFA6EA4B-B0FF-437B-A48E-F11D0CD5EB2B",[],[192,199],{"id":193,"eventType":194,"eventTime":195,"details":196,"label":197,"color":198},"805940f4-1516-48ca-aaf1-15ec7c6ab937","NEW_NVD","2026-11-03T04:01:39.300834+00:00","New CVE added to NVD","Published to NVD","blue",{"id":200,"eventType":201,"eventTime":202,"details":203,"label":204,"color":205},"f39625f3-3fc3-41df-b139-79a11c44ffab","NEW_CISA","2026-11-11T04:01:18.268024+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"lastModified":11,"cacheTime":207,"version":208},1794566357756,"2.0",{"score":210,"band":45,"action":211,"scoredAt":212},90,"Emergency patch","2026-11-13T07:26:57.223468+00:00"]