Barracuda Networks
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| RMM | 5 | – | Apr 15, 2026 |
| Barracuda Email Security Gateway (ESG) | 2 | – | Nov 2, 2026 |
| Barracuda Message Archiver (BMA) | 1 | – | Nov 2, 2026 |
| Barracuda Web Application Firewall (WAF) | 1 | – | Nov 2, 2026 |
| Barracuda Web Security Gateway (WSG) | 1 | – | Nov 2, 2026 |
| Barracuda WAF Control Center (WCC) | 1 | – | Nov 2, 2026 |
| Barracuda Load Balancer Application Delivery Controller (ADC) | 1 | – | Nov 2, 2026 |
Exploited and recent CVEs
- CVE-2026-116606 Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway 0.7%
- CVE-2026-111560 OS Command Injection in Barracuda Appliances 0.5%
- CVE-2026-111560 OS Command Injection in Barracuda Appliances 0.5%
- CVE-2026-111560 OS Command Injection in Barracuda Appliances 0.5%
- CVE-2026-111560 OS Command Injection in Barracuda Appliances 0.5%
- CVE-2026-111560 OS Command Injection in Barracuda Appliances 0.5%
- CVE-2026-111560 OS Command Injection in Barracuda Appliances 0.5%
- CVE-2026-22676 Barracuda RMM < 2025.2.2 Privilege Escalation via Insecure Directory Permissions 0.1%
- CVE-2025-34395 Barracuda RMM < 2025.1.1 Service Center .NET Remoting Path Traversal RCE 0.8%
- CVE-2025-34394 Barracuda RMM < 2025.1.1 Service Center .NET Remoting Deserialization RCE 0.7%
- CVE-2025-34393 Barracuda RMM < 2025.1.1 Service Center Insecure Reflection RCE 0.7%
- CVE-2025-34392 Barracuda RMM < 2025.1.1 Service Center Absolute Path Traversal RCE 24.7%