Skip to content
OpenAdvisories

Vendor

Barracuda Networks

12 known vulnerabilities.

Products

RMM 5 Barracuda Email Security Gateway (ESG) 2 Load Balancer ADC 1 Barracuda Load Balancer Application Delivery Controller (ADC) 1 Barracuda Web Application Firewall (WAF) 1 Barracuda Web Security Gateway (WSG) 1 Barracuda Message Archiver (BMA) 1 Barracuda WAF Control Center (WCC) 1 Barracuda Email Security Gateway 1 Spam & Virus Firewall 1 SSL VPN 1 Web Application Firewall 1 Barracuda ESG Appliance 1 Barracuda Message Archiver 1 Email Security Gateway <= 9.2.1.001 0 Web Application Firewall < 12.2 GA 0 Web Security Gateway 0 Message Archiver 0 Email Security Gateway 0 Email Security Gateway >= 5.1.3.001 0 Email Security Gateway <= 9.2.0.006 0 Web Application Firewall < 12.2 0
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.6
    CVE-2026-111560 Exploited

    OS Command Injection in Barracuda Appliances

    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the craf…

    Barracuda Networks Barracuda Email Security Gateway (ESG) Barracuda Message Archiver (BMA) Barracuda Load Balancer Application Delivery Controller (ADC)
    KEV Nov 10, 2026
  • High 7.8
    CVE-2026-22676

    Barracuda RMM < 2025.2.2 Privilege Escalation via Insecure Directory Permissions

    Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly permissive filesystem ACLs on the C:\Windows\Automation directory. Attackers can modify exis…

    Barracuda Networks RMM
  • High 8.7
    CVE-2025-34395

    Barracuda RMM < 2025.1.1 Service Center .NET Remoting Path Traversal RCE

    Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service in which an unauthenticated attacker can invoke a method vulnerable to path traversal to read arbitrary files. This vulnerability can …

    Barracuda Networks RMM
  • High 8.7
    CVE-2010-20109 Public exploit

    Barracuda Spam & Virus Firewall "locale" Path Traversal

    Barracuda products, confirmed in Spam & Virus Firewall, SSL VPN, and Web Application Firewall versions prior to October 2010, contain a path traversal vulnerability in the view_help.cgi endpoint. The locale parameter fails to properly sanitize user input, all…

    Barracuda Networks Spam & Virus Firewall Web Application Firewall SSL VPN
  • High 8.7
    CVE-2019-5648

    LDAP Credential Exposure in Barracuda Load Balancer ADC

    Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware <= v6.4 allows one to edit the LDAP service configuration of the balancer and change the LDAP server to an attacker-controlled system, without having to re-enter …

    Barracuda Networks Load Balancer ADC