Skip to content

#barracuda-esg

2 articles

Security Alerts Nov 10, 2026

CVE-2026-111560: OS Command Injection in Barracuda Appliances (KEV)

The timezone field in Barracuda appliances (ESG, WAF, Load Balancer ADC, BMA, WCC, WSG) lets an administrator inject OS commands that run as root. The flaw is actively exploited...

Security Alerts Nov 10, 2026

CVE-2026-116606: Authentication Bypass in Barracuda Email Security Gateway

An authentication bypass in Barracuda ESG before 9.4.0.030 lets an unauthenticated attacker restore a crafted configuration backup and take over the appliance settings. Actively exploited...