Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Barracuda Email Security Gateway (ESG) — trust.barracuda.com/security/pre-authentication-authorizati… Clear all filters
TI-2026-83805 CVE-2026-116606 · GHSA-9fcr-mp7p-hprv

Authentication bypass in Barracuda Email Security Gateway allows config restore

Priority MEDIUM 49

An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup ar…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00728 Published 2026-11-02 Fixed in 9.4.0.030 CWE-288
TI-2026-83801 CVE-2026-111560 · GHSA-fq98-vw8w-5vf9

OS command injection in Barracuda appliances

Priority MEDIUM 40

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that exe…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00471 Published 2026-11-02 No fix listed CWE-78