HIGH/ NOVEMBER 4, 2026TODAY’S BRIEFING — #229
Barracuda chained RCE, cPGuard backdoor supply chain, LLMjacking cloud fraud surge
Barracuda disclosed two critical chained vulnerabilities enabling root access; cPGuard's update infrastructure compromised to deploy backdoors; LLMjacking attacks costing enterprises up to $1M in fraudulent cloud charges.
CVE-2026-116606Barracuda Networks Products — An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a…CVE-2026-111560Barracuda Networks Products — Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code…CVE-2023-7102Barracuda Email Security Gateway — Use of a Third Party library produced a vulnerability in Barracuda Networks Inc.CVE-2023-2868Barracuda Networks Email Security Gateway (ESG) Appliance — A remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance form factor only) product effecting versions… · In CISA KEV
Read the full briefing →