Product · Barracuda Networks

Barracuda Web Application Firewall (WAF)

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.6

CVE-2026-111560 Exploited

OS Command Injection in Barracuda Appliances

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the craf…

Barracuda Networks Barracuda Email Security Gateway (ESG) Barracuda Load Balancer Application Delivery Controller (ADC) Barracuda Web Security Gateway (WSG)

Nov 2, 2026
KEV Nov 10, 2026