Hackers now exploit critical Barracuda ESG flaws to gain root access

Barracuda Networks warned that attackers have begun exploiting two recently patched Email Security Gateway (ESG) vulnerabilities that can allow commands to run with root privileges. The attacks require access to the administrative interface of targeted devices and affect a limited number of customers.