Barracuda Networks
Vulnerability activity for Barracuda Networks: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 3
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 3
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 3
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
Recent
- –UnscoredNov 2, 2026Barracuda NetworksADV-cccs-ad1db1d6e2a6Serial Number: AV26-1112 Date: November 2, 2026 As of November 2, 2026, Barracuda Networks is affected by a vulnerability in the following products: Barracuda Email Security Gateway (ESG) Prior to 9.4.0.030 Barracuda Load Balancer Application Delivery Controller (ADC) Prior to 6.4.0 Barracuda Web Application Firewall (WAF) Prior to 11.0.1 Barracuda Web Security Gateway (WSG) Prior to 16.1.100.100 Barracuda Message Archiver (BMA) Prior to 5.5.4.0 Barracuda WAF Control Center (WCC) Prior to 2.2.1
- 9.3CriticalNov 2, 2026Barracuda Email Security Gateway (ESG) Auth bypass / access controlCVE-2026-116606An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s global configuration.
- 8.6HighNov 2, 2026Barracuda Email Security Gateway (ESG) Code / command injectionCVE-2026-111560Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently processed.
- 9.4CriticalMay 24, 2023Barracuda Networks Email Security Gateway (ESG) ApplianceCVE-2023-2868Barracuda Networks ESG Appliance software is affected. An attacker gains remote code execution and potentially full system compromise. Patch the affected software with the latest available update.Exploited87% likelyExploit codeMetasploitDetection
Top products
- Barracuda Email Security Gateway (ESG)2 CVEs in the last year, 1 critical
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- CCCS (Canada) · Nov 2, 2026Barracuda Networks security advisory (AV26-1112)ADV-cccs-ad1db1d6e2a6
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.