IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key

Barracuda Networks vulnerabilities (CVE)

CVE records published for Barracuda Networks, newest first. Follow to get an email when a new one appears.

RMM 5Barracuda Email Security Gateway (ESG) 2email security gateway 600 firmware 1Barracuda Email Security Gateway 1email security gateway 800 firmware 1email security gateway 900 firmware 1Barracuda Load Balancer Application Delivery Controller (ADC) 1message archiver firmware 1Barracuda Message Archiver 1Barracuda Message Archiver (BMA) 1Spam & Virus Firewall 1Barracuda WAF Control Center (WCC) 1SSL VPN 1Barracuda Web Application Firewall (WAF) 1vpn client 1Barracuda Web Security Gateway (WSG) 1Web Application Firewall 1email security gateway 300 firmware 1email security gateway 400 firmware 1
10 results
8.6High
CVE-2026-111560 KEV

OS Command Injection in Barracuda Appliances

Barracuda Networks Barracuda Email Security Gateway (ESG); Barracuda Networks Barracuda Load Balancer Application Delivery Controller (ADC); Barracuda Networks Barracuda Web Application Firewall (WAF); Barracuda Networks Barracuda Web Security Gateway (WSG)

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the craf…

1.1%EPSS
10.0Critical
CVE-2025-34393

Barracuda RMM < 2025.1.1 Service Center Insecure Reflection RCE

Barracuda Networks RMM

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-controlled WSDL service, leading to insecure reflection. This can result in remote code execution through either inv…

10.0Critical
CVE-2025-34392

Barracuda RMM < 2025.1.1 Service Center Absolute Path Traversal RCE

Barracuda Networks RMM

Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlled WSDL that is later loaded by the application. This can lead to arbitrary file write and remote code executio…

26%EPSS
8.7High
CVE-2010-20109

Barracuda Spam & Virus Firewall "locale" Path Traversal

Barracuda Networks Spam & Virus Firewall; Barracuda Networks SSL VPN; Barracuda Networks Web Application Firewall

Barracuda products, confirmed in Spam & Virus Firewall, SSL VPN, and Web Application Firewall versions prior to October 2010, contain a path traversal vulnerability in the view_help.cgi endpoint. The locale parameter fails to properly sanitize user input, all…

1.7%EPSS
6.1Medium
CVE-2025-8319
Barracuda Barracuda Message Archiver

the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter

9.4Critical
CVE-2023-2868 KEV

Remote Code injection in Barracuda Email Security Gateway

Barracuda Barracuda Email Security Gateway

A remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance form factor only) product effecting versions 5.1.3.001-9.2.0.006. The vulnerability arises out of a failure to comprehensively sanitize the processing of .tar f…

87%EPSS