Skip to content

#barracuda-waf

1 article

Security Alerts Nov 10, 2026

CVE-2026-111560: OS Command Injection in Barracuda Appliances (KEV)

The timezone field in Barracuda appliances (ESG, WAF, Load Balancer ADC, BMA, WCC, WSG) lets an administrator inject OS commands that run as root. The flaw is actively exploited...