Recently Patched Barracuda Vulnerabilities Exploited in Attacks

Threat actors rapidly weaponized two newly patched Barracuda Email Security Gateway vulnerabilities, chaining them together to bypass authorization and gain root access — a critical escalation path on a perimeter security appliance. The speed of exploitation (observed across 15 IP addresses in three countries) underscores how quickly attackers operationalize CVEs against unpatched internet-facing devices. CISA's addition of these CVEs to its Known Exploited Vulnerabilities catalog signals that passive patch cycles are insufficient for high-risk appliances. Organizations relying on email security gateways as a trust boundary must treat vendor-issued patches for such devices as emergency-priority updates, not routine maintenance.