Two Barracuda flaws could be chained to bypass authorization and gain root access to devices if attackers can reach their admin interfaces.