{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/email-security-gateway--9.4.0.030/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Email Security Gateway (\u003c 9.4.0.030)","Load Balancer Application Delivery Controller (\u003c 6.4.0)","Web Application Firewall (\u003c 11.0.1)","Web Security Gateway (\u003c 16.1.100.100)","Message Archiver (\u003c 5.5.4.0)","WAF Control Center (\u003c 2.2.1)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","remote-code-execution","network-security","high-confidence-source"],"_cs_type":"advisory","_cs_vendors":["Barracuda Networks"],"content_html":"\u003cp\u003eBarracuda Networks has disclosed multiple security vulnerabilities affecting a wide range of its appliance products. The vulnerabilities are identified as pre-authentication authorization bypass and command injection. Unauthenticated remote attackers may be able to bypass security controls or execute arbitrary system commands on the affected devices.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePrioritize patching of all internet-facing Barracuda appliances to the following minimum versions:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eBarracuda Email Security Gateway (ESG): Update to 9.4.0.030 or later.\u003c/li\u003e\n\u003cli\u003eBarracuda Load Balancer ADC: Update to 6.4.0 or later.\u003c/li\u003e\n\u003cli\u003eBarracuda Web Application Firewall (WAF): Update to 11.0.1 or later.\u003c/li\u003e\n\u003cli\u003eBarracuda Web Security Gateway (WSG): Update to 16.1.100.100 or later.\u003c/li\u003e\n\u003cli\u003eBarracuda Message Archiver (BMA): Update to 5.5.4.0 or later.\u003c/li\u003e\n\u003cli\u003eBarracuda WAF Control Center (WCC): Update to 2.2.1 or later.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eAdministrators should monitor appliance audit logs for unusual management interface access attempts or unexpected process execution spawned by web service accounts.\u003c/p\u003e\n","date_modified":"2026-11-02T21:22:00Z","date_published":"2026-11-02T21:22:00Z","id":"https://feed.craftedsignal.io/briefs/2026-11-barracuda-advisory/","summary":"Multiple Barracuda appliance products are affected by pre-authentication authorization bypass and command injection vulnerabilities that may allow unauthenticated remote attackers to execute arbitrary commands.","title":"Barracuda Networks: Pre-authentication Authorization Bypass and Command Injection","url":"https://feed.craftedsignal.io/briefs/2026-11-barracuda-advisory/"}],"language":"en","title":"CraftedSignal Threat Feed - Email Security Gateway (\u003c 9.4.0.030)","version":"https://jsonfeed.org/version/1.1"}