CVE-2026-116606: Barracuda Email Security Gateway - Authentication Bypass
HoneyLabs honeypots recorded 12 probes matching CVE-2026-116606 from 12 distinct source IP addresses in the last 7 days. Severity is rated critical.
This CVE is on CISA's Known Exploited Vulnerabilities list. CISA added it on 2026-11-10.
What the sensors show
Probes arrived on 2 of the 7 days in this window. The busiest day was 2026-11-05, with 10. No single address sent more than 8% of them. The largest source network was AS14061 (DigitalOcean, LLC), with 50% of the probes from 6 addresses. Over the last 90 days the sensors recorded 74 probes for it. Every probing client that negotiated TLS presented one JA4 fingerprint, t13i3112h1_e8f1e7e78f70_d339722ba4af.
Request paths that identify it
- /cgi-mod/index.cgi
Addresses probing it
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 138.68.231.203 | 1 | DigitalOcean, LLC · commercial scanner: BinaryEdge | United States |
| 142.93.21.163 | 1 | DigitalOcean, LLC · commercial scanner: BinaryEdge | United States |
| 157.245.239.79 | 1 | DigitalOcean, LLC · commercial scanner: BinaryEdge | United States |
| 165.22.177.65 | 1 | DigitalOcean, LLC · commercial scanner: BinaryEdge | United States |
| 173.255.226.194 | 1 | Akamai Connected Cloud · commercial scanner: BinaryEdge | United States |
| 192.155.87.176 | 1 | Akamai Connected Cloud · commercial scanner: BinaryEdge | United States |
| 192.81.131.124 | 1 | Akamai Connected Cloud · commercial scanner: BinaryEdge | United States |
| 206.189.184.242 | 1 | DigitalOcean, LLC · commercial scanner: BinaryEdge | United States |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS14061 | DigitalOcean, LLC | 6 | 6 |
| AS63949 | Akamai Connected Cloud | 6 | 6 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 12 |
Captured requests
- /cgi-mod/index.cgi
HTTP client fingerprints
- b11cun030_00040012_f6d8d797
CVE report
Open a specific CVE from the CVE tracker.