Known Exploited Vulnerabilities May 26, 2023 · CISA KEV Catalog

CVE-2023-2868: Barracuda Networks ESG Appliance Improper Input Validation Vulnerability

Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: Barracuda Networks CVE-2023-2868
Related: CVE-2026-116606: Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability Known Exploited Vulnerabilities · Nov 10, 2026
CVE-2026-111560: Barracuda Networks Multiple Products OS Command Injection Vulnerability Known Exploited Vulnerabilities · Nov 10, 2026
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026