Barracuda CVE-2026-116606: How to Check and Patch Your ESG
Barracuda patched two chained flaws, CVE-2026-116606 and CVE-2026-111560, on November 2. Here are the affected products, patch IDs and the checks to run on each appliance.
Barracuda patched two chained flaws, CVE-2026-116606 and CVE-2026-111560, on November 2. Here are the affected products, patch IDs and the checks to run on each appliance.
CVE-2026-109518 lets an on-path attacker swap an APT package after verification. Here are the fixed apt versions for Debian and Ubuntu and the commands to check yours.
Xen XSA-523 lets a malicious VM read and write other VMs’ memory. See fixed versions for XCP-ng 8.3, Qubes 4.3 and Debian, and how to patch and reboot.