Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login

CVE-2026-116606 (auth bypass) and CVE-2026-* (command injection) chain to achieve root on Barracuda Email Security Gateway. Unauthenticated, actively exploited.