BA
Vendor
Barracuda
34
CVEs
6
On KEV
0
New 30D
Products
ES9.8
Email Security Gateway 300 Firmware
Barracuda
2 CVEs1 on KEV0 new
ES9.8
Email Security Gateway 400 Firmware
Barracuda
2 CVEs1 on KEV0 new
ES9.8
Email Security Gateway 600 Firmware
Barracuda
2 CVEs1 on KEV0 new
ES9.8
Email Security Gateway 800 Firmware
Barracuda
2 CVEs1 on KEV0 new
ES9.8
Email Security Gateway 900 Firmware
Barracuda
2 CVEs1 on KEV0 new
ES9.8
Email Security Gateway
Email Security
1 CVEs1 on KEV0 new
RM9.8
Rmm
Barracuda
4 CVEs0 on KEV0 new
LB9.8
Load Balancer
Barracuda
2 CVEs0 on KEV0 new
WF–
Web Filter
Barracuda
2 CVEs0 on KEV0 new
BM6.1
Barracuda Message Archiver
Barracuda
1 CVEs0 on KEV0 new
LB8.8
Load Balancer Adc
Barracuda
1 CVEs0 on KEV0 new
LB6.5
Load Balancer Adc Firmware
Barracuda
1 CVEs0 on KEV0 new
MA6.1
Message Archiver
Barracuda
1 CVEs0 on KEV0 new
MA6.1
Message Archiver Firmware
Barracuda
1 CVEs0 on KEV0 new
NA7.8
Network Access Client
Barracuda
1 CVEs0 on KEV0 new
TF7.2
T100b Firmware
Barracuda
1 CVEs0 on KEV0 new
TF7.2
T193a Firmware
Barracuda
1 CVEs0 on KEV0 new
TF7.2
T200c Firmware
Barracuda
1 CVEs0 on KEV0 new
TF7.2
T400c Firmware
Barracuda
1 CVEs0 on KEV0 new
TF7.2
T600d Firmware
Barracuda
1 CVEs0 on KEV0 new
TF7.2
T900b Firmware
Barracuda
1 CVEs0 on KEV0 new
TF7.2
T93a Firmware
Barracuda
1 CVEs0 on KEV0 new
VC7.8
Vpn Client
Barracuda
1 CVEs0 on KEV0 new
WA9.8
Web Application Firewall
Barracuda
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-34395 | RM Rmm Barracuda | 7.5 | Dec 10 | Barracuda RMM < 2025.1.1 Service Center .NET Remoting Path Traversal RCE |
| CVE-2025-34394 | RM Rmm Barracuda | 9.8 | Dec 10 | Barracuda RMM < 2025.1.1 Service Center .NET Remoting Deserialization RCE |
| CVE-2025-34393 | RM Rmm Barracuda | 9.8 | Dec 10 | Barracuda RMM < 2025.1.1 Service Center Insecure Reflection RCE |
| CVE-2025-34392 | RM Rmm Barracuda | 9.8 | Dec 10 | Barracuda RMM < 2025.1.1 Service Center Absolute Path Traversal RCE |
| CVE-2025-8319 | BM Barracuda Message Archiver Barracuda | 6.1 | Jul 29 | the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter |
| CVE-2023-7102 | ES Email Security Gateway 300 Firmware Barracuda | 9.8 | Dec 24 | Use of a Third Party library produced a vulnerability in Barracuda Networks Inc |
| CVE-2023-2868 In wildKEV | ES Email Security Gateway Barracuda | 9.8 | May 24 | Remote Code injection in Barracuda Email Security Gateway |
| CVE-2023-26213 | TF T200c Firmware Barracuda | 7.2 | Mar 3 | On Barracuda CloudGen WAN Private Edge Gateway devices before 8 webui-sdwan-1089-8.3.1-174141891, an OS command injection vulnerability exists in /ajax/update_certificate - a… |
| CVE-2021-42711 | NA Network Access Client Barracuda | 7.8 | Dec 1 | Barracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with Insecure Permissions |
| CVE-2019-5648 | LB Load Balancer Adc Firmware Barracuda | 6.5 | Mar 12 | Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware <= v6.4 allows one to edit the LDAP service configuration of the balancer and… |
| CVE-2014-2595 | WA Web Application Firewall Barracuda | 9.8 | Feb 12 | Barracuda Web Application Firewall (WAF) 7.8.1.013 allows remote attackers to bypass authentication by leveraging a permanent authentication token obtained from a query string |
| CVE-2019-6724 | VC Vpn Client Barracuda | 7.8 | Mar 18 | The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process and can allow an unprivileged local… |
| CVE-2018-20369 | MA Message Archiver Barracuda | 6.1 | Dec 23 | Barracuda Message Archiver 2018 has XSS in the error_msg exception-handling value for the ldap_user parameter to the cgi-mod/ldap_load_entry.cgi module |
| CVE-2014-8428 | LB Load Balancer Barracuda | 9.8 | Aug 28 | Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key |
| CVE-2014-8426 | LB Load Balancer Barracuda | 9.8 | Aug 28 | Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015 |
| CVE-2017-6320 | LB Load Balancer Adc Barracuda | 8.8 | Jul 18 | A remote command injection vulnerability exists in the Barracuda Load Balancer product line (confirmed on v5.4.0.004 (2015-11-26) and v6.0.1.006 (2016-08-19); fixed in 6.1.0.003… |
| CVE-2015-0962 | WF Web Filter Barracuda | – | May 25 | Barracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL Inspection is enabled, uses the same root Certification Authority certificate across different customers'… |
| CVE-2015-0961 | WF Web Filter Barracuda | – | May 25 | Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509 certificates from upstream SSL servers, which allows man-in-the-middle attackers to… |
