Exploited vulnerabilities
Barracuda Networks
3 Barracuda Networks vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue3
Last 12 months2
In ransomware campaigns0
Last addition10 November 2026
The vulnerabilities3
- 10 November 2026CVE-2026-116606Barracuda Email Security Gateway (ESG)Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
- 10 November 2026CVE-2026-111560Multiple ProductsBarracuda Networks Multiple Products OS Command Injection Vulnerability
- 26 May 2023CVE-2023-2868Email Security Gateway (ESG) ApplianceBarracuda Networks ESG Appliance Improper Input Validation Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 13 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, Barracuda Networks included.Using Barracuda Networks products? Add them to your My Defence map: alerts and briefings cover only your products.