Load Balancer Application Delivery Controller (< 6.4.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/load-balancer-application-delivery-controller--6.4.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 02 Nov 2026 21:22:00 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgBarracuda Networks: Pre-authentication Authorization Bypass and Command Injectionhttps://feed.craftedsignal.io/briefs/2026-11-barracuda-advisory/Mon, 02 Nov 2026 21:22:00 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-barracuda-advisory/Multiple Barracuda appliance products are affected by pre-authentication authorization bypass and command injection vulnerabilities that may allow unauthenticated remote attackers to execute arbitrary commands.Barracuda Networks has disclosed multiple security vulnerabilities affecting a wide range of its appliance products. The vulnerabilities are identified as pre-authentication authorization bypass and command injection. Unauthenticated remote attackers may be able to bypass security controls or execute arbitrary system commands on the affected devices.

Recommendation

Prioritize patching of all internet-facing Barracuda appliances to the following minimum versions:

  • Barracuda Email Security Gateway (ESG): Update to 9.4.0.030 or later.
  • Barracuda Load Balancer ADC: Update to 6.4.0 or later.
  • Barracuda Web Application Firewall (WAF): Update to 11.0.1 or later.
  • Barracuda Web Security Gateway (WSG): Update to 16.1.100.100 or later.
  • Barracuda Message Archiver (BMA): Update to 5.5.4.0 or later.
  • Barracuda WAF Control Center (WCC): Update to 2.2.1 or later.

Administrators should monitor appliance audit logs for unusual management interface access attempts or unexpected process execution spawned by web service accounts.

]]>highadvisoryvulnerabilityremote-code-executionnetwork-securityhigh-confidence-source