Skip to content
OpenAdvisories

Vendor

Barracuda Networks

12 known vulnerabilities.

Products

RMM 5 Barracuda Email Security Gateway (ESG) 2 Load Balancer ADC 1 Barracuda Load Balancer Application Delivery Controller (ADC) 1 Barracuda Web Application Firewall (WAF) 1 Barracuda Web Security Gateway (WSG) 1 Barracuda Message Archiver (BMA) 1 Barracuda WAF Control Center (WCC) 1 Barracuda Email Security Gateway 1 Spam & Virus Firewall 1 SSL VPN 1 Web Application Firewall 1 Barracuda ESG Appliance 1 Barracuda Message Archiver 1 Email Security Gateway <= 9.2.1.001 0 Web Application Firewall < 12.2 GA 0 Web Security Gateway 0 Message Archiver 0 Email Security Gateway 0 Email Security Gateway >= 5.1.3.001 0 Email Security Gateway <= 9.2.0.006 0 Web Application Firewall < 12.2 0
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-116606 Exploited Public exploit Scanner template EPSS 11%

    Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway

    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modifi…

    Barracuda Networks Barracuda Email Security Gateway (ESG)
    KEV Nov 10, 2026
  • Critical 10.0
    CVE-2025-34394

    Barracuda RMM < 2025.1.1 Service Center .NET Remoting Deserialization RCE

    Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service that is insufficiently protected against deserialization of arbitrary types. This can lead to remote code execution.

    Barracuda Networks RMM
  • Critical 10.0
    CVE-2025-34393

    Barracuda RMM < 2025.1.1 Service Center Insecure Reflection RCE

    Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-controlled WSDL service, leading to insecure reflection. This can result in remote code execution through either inv…

    Barracuda Networks RMM
  • Critical 10.0
    CVE-2025-34392 EPSS 26%

    Barracuda RMM < 2025.1.1 Service Center Absolute Path Traversal RCE

    Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlled WSDL that is later loaded by the application. This can lead to arbitrary file write and remote code executio…

    Barracuda Networks RMM
  • Critical 9.4
    CVE-2023-2868 Exploited Public exploit EPSS 87%

    Remote Code injection in Barracuda Email Security Gateway

    A remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance form factor only) product effecting versions 5.1.3.001-9.2.0.006. The vulnerability arises out of a failure to comprehensively sanitize the processing of .tar f…

    Barracuda Networks Barracuda Email Security Gateway
    KEV May 26, 2023