On 10 November 2026, the US agency CISA adds six exploited vulnerabilities to its catalogue, including two Barracuda Email Security Gateway vulnerabilities that, when chained, give root access without authentication and whose exploitation is confirmed by the vendor. The other four affect Chromium, Outlook, Cisco BroadWorks and Openwave Webtop; for BroadWorks, no public source yet…
