{"id":"CVE-2026-116606","published":"2026-11-02T13:17:37.017","lastModified":"2026-11-03T05:18:31.200","description":"An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s global configuration.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-288"],"vendors":[],"products":[],"references":[{"url":"https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0042.md","tags":[]},{"url":"https://trust.barracuda.com/security/pre-authentication-authorization-bypass-command-injection","tags":[]}],"exploitRefs":[{"url":"https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0042.md","tags":[]}],"hasPoc":true,"ai":null}