Barracuda Networks Barracuda Email Security Gateway (Esg) vulnerabilities
2 vulnerabilities
Known vulnerabilities in Barracuda Networks Barracuda Email Security Gateway (Esg), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
Act nowCVE-2026-116606Barracuda Networks · Barracuda Email Security Gateway (ESG)Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel VulnerabilityAn authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s global configuration.CVSS9.3CriticalKEVEPSS1.60%Act nowCVE-2026-111560Barracuda Networks · Multiple Products +6 moreBarracuda Networks Multiple Products OS Command Injection VulnerabilityImproper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently processed.CVSS8.6HighKEVEPSS1.06%