Barracuda warns of critical flaws allowing root access to devices

Two critical vulnerabilities in Barracuda's security appliances — an authentication bypass and an OS command injection flaw — allow attackers to gain root-level access to devices that should themselves be protecting networks. This mirrors a 2021 incident where UNC4841 exploited nearly identical Barracuda ESG weaknesses in state-sponsored attacks against government agencies, demonstrating that lessons were not fully operationalized. The severity is compounded by the fact that these are security appliances: compromising them can give attackers a privileged vantage point inside the network perimeter. Organisations that delay patching network-edge security devices face the highest risk, as these devices are often internet-facing and trusted by downstream systems. Prompt patching, strict administrative access controls, and continuous monitoring of these appliances are essential to preventing exploitation.