Multiple security vulnerabilities have been identified in Email Security Gateway and related network security appliances, affecting administrative functionality and command execution controls. The flaws can allow unauthorized configuration changes and root-level command execution when administrative interfaces are reachable. Overall risk is elevated for environments where management access is exposed beyond trusted internal networks. They may be combined to bypass authorization controls and obtain root access to affected devices.
CVE-2026-116606 (CVSS 3.0 — Low): This flaw is an authentication weakness in the Email Security Gateway that can allow an attacker with access to the administrative interface to modify the appliance's global configuration.[/subscribe_to_unlock_form]
Multiple security vulnerabilities have been identified in Email Security Gateway and related network security appliances, affecting administrative functionality and command execution controls. The flaws can allow unauthorized configuration changes and root-level command execution when administrative interfaces are reachable. Overall risk is elevated for environments where management access is exposed beyond trusted internal networks. They may be combined to bypass authorization controls and obtain root access to affected devices.
CVE-2026-116606 (CVSS 3.0 — Low): This flaw is an authentication weakness in the Email Security Gateway that can allow an attacker with access to the administrative interface to modify the appliance's global configuration.[emaillocker id="1283"]
CVE-2026-111560: This flaw allows an attacker with administrative permissions to inject operating system commands that execute with root privileges on affected appliances.
CVE-2023-7102: This flaw in the Email Security Gateway was exploited in zero-day attacks to execute arbitrary code on affected appliances.
CVE-2023-2868: This flaw in the Email Security Gateway was exploited in cyber-espionage attacks to compromise appliances, deploy malicious software, and steal data.
These vulnerabilities collectively present a serious risk to organizations that expose administrative interfaces to untrusted networks. The most at-risk environments are those where administrative access is not tightly restricted or where multiple affected appliances are deployed. Organizations should prioritize protecting administrative interfaces and limiting exposure to trusted networks.
The following reports contain further technical details:
[/emaillocker]