{"id":16855,"date":"2026-11-10T09:00:00","date_gmt":"2026-11-10T08:00:00","guid":{"rendered":"https:\/\/safewave.ai\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\/"},"modified":"2026-11-12T01:59:24","modified_gmt":"2026-11-12T00:59:24","slug":"outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway","status":"publish","type":"post","link":"https:\/\/safewave.ai\/en\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\/","title":{"rendered":"Outlook and Barracuda ESG in KEV: exploited flaw exposes NTLMv2 hashes, and a two-bug chain grants root on gateway"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"16855\" class=\"elementor elementor-16855 elementor-16815\" data-elementor-post-type=\"post\">\n\t\t\t\t<header class=\"elementor-element elementor-element-69a6236 e-flex e-con-boxed e-con e-parent\" data-id=\"69a6236\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7cac elementor-widget elementor-widget-heading\" data-id=\"69a7cac\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<p class=\"elementor-heading-title elementor-size-default\"><a href=\"https:\/\/safewave.ai\/en\/email-and-employee-protection\/\">Email and Employee Protection<\/a><\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7f76 elementor-widget elementor-widget-heading\" data-id=\"69a7f76\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Outlook and Barracuda ESG in KEV: exploited flaw exposes NTLMv2 hashes, and a two-bug chain grants root on gateway<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69a72db elementor-widget elementor-widget-text-editor\" data-id=\"69a72db\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>On November 10, 2026, CISA added CVE-2026-124194 in Outlook and two flaws in the Barracuda Email Security Gateway to its Known Exploited Vulnerabilities (KEV) catalog. That same day, Microsoft patched the Outlook vulnerability in its record-setting November update bundle.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7f83 elementor-widget elementor-widget-html\" data-id=\"69a7f83\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<ul class=\"sw-meta\"><li><span>Source<\/span><a href=\"https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-124194\" target=\"_blank\" rel=\"noopener\">CISA<\/a><\/li><li><span>Source publication<\/span>November 10, 2026<\/li><li><span>Type<\/span>Threats and incidents<\/li><\/ul>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/header>\n\t\t<article class=\"elementor-element elementor-element-69a7768 e-flex e-con-boxed e-con e-parent\" data-id=\"69a7768\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7465 elementor-widget elementor-widget-text-editor\" data-id=\"69a7465\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>What happened<\/h2><p><strong>Outlook.<\/strong> According to the NVD, in the case of CVE-2026-124194, the Outlook interface fails to warn users about unsafe actions, enabling network-based spoofing. The CVSS 3.1 score is 6.5: the attack requires no privileges, but user interaction is required. Jack Bicer of Action1 detailed the mechanism in Infosecurity Magazine: an attacker sends a crafted message file, and upon opening it, Outlook connects to an attacker-controlled network location without the standard external content warning. This connection can leak the user&#8217;s NTLMv2 hash, which can subsequently be used to authenticate on their behalf. Microsoft 365 Apps for Enterprise as well as Office LTSC 2021 and 2024 are vulnerable. CISA has set a compliance deadline of November 24, 2026, for US federal agencies.<\/p><p><strong>Patch bundle.<\/strong> Infosecurity Magazine reports that Microsoft&#8217;s November release addresses 1,235 vulnerabilities, including 66 critical flaws, marking the fourth record-breaking month this year. Other outlets tally the numbers differently, reporting figures ranging from roughly 1,100 to over 1,250.<\/p><p><strong>Barracuda ESG.<\/strong> CVE-2026-116606 (CVSS 9.3) is an authentication bypass in versions prior to 9.4.0.030. According to Mandiant, an unauthenticated attacker can trigger a configuration import and upload a crafted backup. CVE-2026-111560 (CVSS 8.6) is a command injection flaw in the timezone setting that grants root privileges to an administrator. Barracuda confirmed that chaining both flaws results in complete appliance takeover. CISA deadline: November 13, 2026.<\/p><h2>Key findings<\/h2><ul><li>CVE-2026-124194 (Outlook, CVSS 6.5): NTLMv2 hash leak upon opening a crafted message file; vulnerability is actively exploited.<\/li><li>A patch is included in the November Office updates; threat actors and attack scale remain unknown.<\/li><li>CVE-2026-116606 and CVE-2026-111560 (Barracuda ESG): chained together grant root on the gateway; added to KEV on November 10, 2026.<\/li><li>The second flaw also impacts other Barracuda products, including Web Application Firewall and Message Archiver.<\/li><li>Barracuda recommends restricting administrative interface access strictly to trusted internal networks.<\/li><\/ul><h2>Why it matters<\/h2><div class=\"sw-take\"><span class=\"sw-take__k\">SafeWave Commentary<\/span>Both issues involve email, but target different vectors: the first impacts employee accounts, while the second targets the appliance intended to filter that email. An NTLMv2 hash is not a plaintext password, but across networks that still accept NTLM, it is often sufficient for user impersonation. Action items: deploy the Office update, prioritizing administrators and privileged accounts; block outbound SMB traffic (port 445) to the internet at the perimeter; audit where NTLM remains active across the organization and restrict it where feasible; verify the Barracuda ESG version and ensure the administrative console is not exposed to the internet. We previously covered deprecating legacy protocols in Active Directory in our analysis <a href=\"https:\/\/safewave.ai\/en\/retiring-rc4-from-active-directory-microsofts-timeline-and-why-dependencies-are-hard-to-find\/\">on RC4<\/a>. More: <a href=\"https:\/\/safewave.ai\/en\/email-and-employee-protection\/\">Email and Employee Protection<\/a>.<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/article>\n\t\t<aside class=\"elementor-element elementor-element-69a7d8c e-flex e-con-boxed e-con e-parent\" data-id=\"69a7d8c\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-69a7f4a elementor-widget elementor-widget-text-editor\" data-id=\"69a7f4a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"sw-h\">Source<\/p><ul class=\"sw-src\"><li><a href=\"https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-124194\" target=\"_blank\" rel=\"noopener\">CISA \u2013 Known Exploited Vulnerabilities Catalog: CVE-2026-124194<\/a><\/li><li><a href=\"https:\/\/www.infosecurity-magazine.com\/news\/microsoft-fixes-1235-flaws-record\/\" target=\"_blank\" rel=\"noopener\">Infosecurity Magazine \u2013 Microsoft Breaks Another Patch Tuesday Record with 1235 Flaws<\/a><\/li><li><a href=\"https:\/\/trust.barracuda.com\/security\/pre-authentication-authorization-bypass-command-injection\" target=\"_blank\" rel=\"noopener\">Barracuda \u2013 Pre-authentication authorization bypass and command injection<\/a><\/li><\/ul><p class=\"sw-rel\"><a href=\"https:\/\/safewave.ai\/en\/email-and-employee-protection\/\">Area: Email and Employee Protection \u2192<\/a><a href=\"https:\/\/safewave.ai\/en\/technology-intelligence\/\">All analyses \u2192<\/a><\/p><p class=\"sw-asof\">SafeWave editorial analysis based on the cited source. Facts come from the source; the &#8220;Why it matters&#8221; section is our commentary.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/aside>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>CISA added CVE-2026-124194 in Outlook (NTLMv2 hash leak) and two flaws in Barracuda ESG to KEV. Deadlines for US agencies: November 24 and 13, 2026.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"footnotes":""},"categories":[272],"tags":[],"class_list":["post-16855","post","type-post","status-publish","format-standard","hentry","category-email-and-employee-protection"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Outlook and Barracuda ESG in KEV: exploited flaw exposes NTLMv2 hashes, and a two-bug chain grants root on gateway &#8211; SafeWave<\/title>\n<meta name=\"description\" content=\"CISA added CVE-2026-124194 in Outlook (NTLMv2 hash leak) and two flaws in Barracuda ESG to KEV. Deadlines for US agencies: November 24 and 13, 2026.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/safewave.ai\/en\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Outlook and Barracuda ESG in KEV: exploited flaw exposes NTLMv2 hashes, and a two-bug chain grants root on gateway &#8211; SafeWave\" \/>\n<meta property=\"og:description\" content=\"CISA added CVE-2026-124194 in Outlook (NTLMv2 hash leak) and two flaws in Barracuda ESG to KEV. Deadlines for US agencies: November 24 and 13, 2026.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/safewave.ai\/en\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\/\" \/>\n<meta property=\"og:site_name\" content=\"SafeWave\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-10T08:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-12T00:59:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/safewave.ai\/wp-content\/uploads\/2026\/11\/safewave-cybersecurity-x-ai-1200x630-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"SafeWave\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"SafeWave\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\\\/\"},\"author\":{\"name\":\"SafeWave\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#\\\/schema\\\/person\\\/9e9fc64ff61c418abb6f658be85dcf4a\"},\"headline\":\"Outlook and Barracuda ESG in KEV: exploited flaw exposes NTLMv2 hashes, and a two-bug chain grants root on gateway\",\"datePublished\":\"2026-11-10T08:00:00+00:00\",\"dateModified\":\"2026-11-12T00:59:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\\\/\"},\"wordCount\":552,\"publisher\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#organization\"},\"articleSection\":[\"Email and Employee Protection\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\\\/\",\"url\":\"https:\\\/\\\/safewave.ai\\\/en\\\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\\\/\",\"name\":\"Outlook and Barracuda ESG in KEV: exploited flaw exposes NTLMv2 hashes, and a two-bug chain grants root on gateway &#8211; SafeWave\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#website\"},\"datePublished\":\"2026-11-10T08:00:00+00:00\",\"dateModified\":\"2026-11-12T00:59:24+00:00\",\"description\":\"CISA added CVE-2026-124194 in Outlook (NTLMv2 hash leak) and two flaws in Barracuda ESG to KEV. Deadlines for US agencies: November 24 and 13, 2026.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/safewave.ai\\\/en\\\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/safewave.ai\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Outlook and Barracuda ESG in KEV: exploited flaw exposes NTLMv2 hashes, and a two-bug chain grants root on gateway\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/safewave.ai\\\/en\\\/\",\"name\":\"SafeWave\",\"description\":\"We protect people, data and AI.\",\"publisher\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#organization\"},\"alternateName\":\"SafeWave sp. z o.o.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/safewave.ai\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#organization\",\"name\":\"SafeWave\",\"alternateName\":\"SafeWave sp. z o.o.\",\"url\":\"https:\\\/\\\/safewave.ai\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/safewave.ai\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/SafeWave-BLACK_350.png\",\"contentUrl\":\"https:\\\/\\\/safewave.ai\\\/wp-content\\\/uploads\\\/2022\\\/05\\\/SafeWave-BLACK_350.png\",\"width\":350,\"height\":270,\"caption\":\"SafeWave\"},\"image\":{\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/safewave-ai\",\"https:\\\/\\\/www.youtube.com\\\/@SafeWaveAI\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/safewave.ai\\\/en\\\/#\\\/schema\\\/person\\\/9e9fc64ff61c418abb6f658be85dcf4a\",\"name\":\"SafeWave\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g\",\"caption\":\"SafeWave\"},\"description\":\"Zesp\u00f3\u0142 SafeWave \u2013 cyberbezpiecze\u0144stwo i AI dla firm od 1998 roku. Analizy Technology Intelligence przygotowujemy z pomoc\u0105 AI i weryfikujemy redakcyjnie.\",\"sameAs\":[\"https:\\\/\\\/safewave.ai\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Outlook and Barracuda ESG in KEV: exploited flaw exposes NTLMv2 hashes, and a two-bug chain grants root on gateway &#8211; SafeWave","description":"CISA added CVE-2026-124194 in Outlook (NTLMv2 hash leak) and two flaws in Barracuda ESG to KEV. Deadlines for US agencies: November 24 and 13, 2026.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/safewave.ai\/en\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\/","og_locale":"en_US","og_type":"article","og_title":"Outlook and Barracuda ESG in KEV: exploited flaw exposes NTLMv2 hashes, and a two-bug chain grants root on gateway &#8211; SafeWave","og_description":"CISA added CVE-2026-124194 in Outlook (NTLMv2 hash leak) and two flaws in Barracuda ESG to KEV. Deadlines for US agencies: November 24 and 13, 2026.","og_url":"https:\/\/safewave.ai\/en\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\/","og_site_name":"SafeWave","article_published_time":"2026-11-10T08:00:00+00:00","article_modified_time":"2026-11-12T00:59:24+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/safewave.ai\/wp-content\/uploads\/2026\/11\/safewave-cybersecurity-x-ai-1200x630-1.png","type":"image\/png"}],"author":"SafeWave","twitter_card":"summary_large_image","twitter_misc":{"Written by":"SafeWave","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/safewave.ai\/en\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\/#article","isPartOf":{"@id":"https:\/\/safewave.ai\/en\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\/"},"author":{"name":"SafeWave","@id":"https:\/\/safewave.ai\/en\/#\/schema\/person\/9e9fc64ff61c418abb6f658be85dcf4a"},"headline":"Outlook and Barracuda ESG in KEV: exploited flaw exposes NTLMv2 hashes, and a two-bug chain grants root on gateway","datePublished":"2026-11-10T08:00:00+00:00","dateModified":"2026-11-12T00:59:24+00:00","mainEntityOfPage":{"@id":"https:\/\/safewave.ai\/en\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\/"},"wordCount":552,"publisher":{"@id":"https:\/\/safewave.ai\/en\/#organization"},"articleSection":["Email and Employee Protection"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/safewave.ai\/en\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\/","url":"https:\/\/safewave.ai\/en\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\/","name":"Outlook and Barracuda ESG in KEV: exploited flaw exposes NTLMv2 hashes, and a two-bug chain grants root on gateway &#8211; SafeWave","isPartOf":{"@id":"https:\/\/safewave.ai\/en\/#website"},"datePublished":"2026-11-10T08:00:00+00:00","dateModified":"2026-11-12T00:59:24+00:00","description":"CISA added CVE-2026-124194 in Outlook (NTLMv2 hash leak) and two flaws in Barracuda ESG to KEV. Deadlines for US agencies: November 24 and 13, 2026.","breadcrumb":{"@id":"https:\/\/safewave.ai\/en\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/safewave.ai\/en\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/safewave.ai\/en\/outlook-and-barracuda-esg-in-kev-exploited-flaw-exposes-ntlmv2-hashes-and-a-two-bug-chain-grants-root-on-gateway\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/safewave.ai\/en\/"},{"@type":"ListItem","position":2,"name":"Outlook and Barracuda ESG in KEV: exploited flaw exposes NTLMv2 hashes, and a two-bug chain grants root on gateway"}]},{"@type":"WebSite","@id":"https:\/\/safewave.ai\/en\/#website","url":"https:\/\/safewave.ai\/en\/","name":"SafeWave","description":"We protect people, data and AI.","publisher":{"@id":"https:\/\/safewave.ai\/en\/#organization"},"alternateName":"SafeWave sp. z o.o.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/safewave.ai\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/safewave.ai\/en\/#organization","name":"SafeWave","alternateName":"SafeWave sp. z o.o.","url":"https:\/\/safewave.ai\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/safewave.ai\/en\/#\/schema\/logo\/image\/","url":"https:\/\/safewave.ai\/wp-content\/uploads\/2022\/05\/SafeWave-BLACK_350.png","contentUrl":"https:\/\/safewave.ai\/wp-content\/uploads\/2022\/05\/SafeWave-BLACK_350.png","width":350,"height":270,"caption":"SafeWave"},"image":{"@id":"https:\/\/safewave.ai\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/safewave-ai","https:\/\/www.youtube.com\/@SafeWaveAI"]},{"@type":"Person","@id":"https:\/\/safewave.ai\/en\/#\/schema\/person\/9e9fc64ff61c418abb6f658be85dcf4a","name":"SafeWave","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/65abcb7733e8dc7978eef52261952bdb2d6b542553675327aa0a3cfc74ee68bf?s=96&d=mm&r=g","caption":"SafeWave"},"description":"Zesp\u00f3\u0142 SafeWave \u2013 cyberbezpiecze\u0144stwo i AI dla firm od 1998 roku. Analizy Technology Intelligence przygotowujemy z pomoc\u0105 AI i weryfikujemy redakcyjnie.","sameAs":["https:\/\/safewave.ai"]}]}},"_links":{"self":[{"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/posts\/16855","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/comments?post=16855"}],"version-history":[{"count":2,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/posts\/16855\/revisions"}],"predecessor-version":[{"id":16865,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/posts\/16855\/revisions\/16865"}],"wp:attachment":[{"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/media?parent=16855"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/categories?post=16855"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/safewave.ai\/en\/wp-json\/wp\/v2\/tags?post=16855"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}