BN
Vendor
Barracuda Networks
23
CVEs
1
On KEV
0
New 30D
Products
ES9.8
Email Security Gateway (ESG) Appliance
Barracuda Networks
1 CVEs1 on KEV0 new
BS–
Barracuda Spam Firewall
Barracuda Networks
13 CVEs0 on KEV0 new
RM9.8
RMM
Barracuda Networks
5 CVEs0 on KEV0 new
BI–
Barracuda IM Firewall
Barracuda Networks
1 CVEs0 on KEV0 new
BL–
Barracuda Load Balancer
Barracuda Networks
1 CVEs0 on KEV0 new
BM–
Barracuda Message Archiver
Barracuda Networks
1 CVEs0 on KEV0 new
BW–
Barracuda Web Filter
Barracuda Networks
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-22676 | RM RMM Barracuda Networks | 7.8 | Apr 15 | Barracuda RMM < 2025.2.2 Privilege Escalation via Insecure Directory Permissions |
| CVE-2025-34395 | RM RMM Barracuda Networks | 7.5 | Dec 10 | Barracuda RMM < 2025.1.1 Service Center .NET Remoting Path Traversal RCE |
| CVE-2025-34394 | RM RMM Barracuda Networks | 9.8 | Dec 10 | Barracuda RMM < 2025.1.1 Service Center .NET Remoting Deserialization RCE |
| CVE-2025-34393 | RM RMM Barracuda Networks | 9.8 | Dec 10 | Barracuda RMM < 2025.1.1 Service Center Insecure Reflection RCE |
| CVE-2025-34392 | RM RMM Barracuda Networks | 9.8 | Dec 10 | Barracuda RMM < 2025.1.1 Service Center Absolute Path Traversal RCE |
| CVE-2023-2868 In wildKEV | ES Email Security Gateway (ESG) Appliance Barracuda Networks | 9.8 | May 24 | Remote Code injection in Barracuda Email Security Gateway |
| CVE-2008-1094 | BS Barracuda Spam Firewall Barracuda Networks | – | Dec 19 | SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall (BSF) before 3.5.12.007 allows remote authenticated administrators to execute… |
| CVE-2008-0971 | BL Barracuda Load Balancer Barracuda Networks | – | Dec 19 | Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in Barracuda Spam Firewall (BSF) before 3.5.12.007, Message Archiver before 1.2.1.002, Web Filter before… |
| CVE-2008-2333 | BS Barracuda Spam Firewall Barracuda Networks | – | May 23 | Cross-site scripting (XSS) vulnerability in ldap_test.cgi in Barracuda Spam Firewall (BSF) before 3.5.11.025 allows remote attackers to inject arbitrary web script or HTML via the… |
| CVE-2007-5058 | BS Barracuda Spam Firewall Barracuda Networks | – | Sep 24 | Cross-site scripting (XSS) vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows remote attackers to inject arbitrary web… |
| CVE-2007-1673 | BS Barracuda Spam Firewall Barracuda Networks | – | May 9 | unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry… |
| CVE-2006-4082 | BS Barracuda Spam Firewall Barracuda Networks | – | Aug 11 | Barracuda Spam Firewall (BSF), possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 (localhost), which allows local users to gain… |
| CVE-2006-4081 | BS Barracuda Spam Firewall Barracuda Networks | – | Aug 11 | preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote attackers to execute commands via shell metacharacters ("|" pipe symbol) in the file… |
| CVE-2006-4001 | BS Barracuda Spam Firewall Barracuda Networks | – | Aug 5 | Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows remote attackers to read sensitive… |
| CVE-2006-4000 | BS Barracuda Spam Firewall Barracuda Networks | – | Aug 5 | Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote authenticated users to read arbitrary… |
| CVE-2005-2849 | BS Barracuda Spam Firewall Barracuda Networks | – | Sep 8 | Argument injection vulnerability in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to (1) read portions of source code via the -f option to Dig… |
| CVE-2005-2848 | BS Barracuda Spam Firewall Barracuda Networks | – | Sep 8 | Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to read arbitrary files via a |
| CVE-2005-2847 | BS Barracuda Spam Firewall Barracuda Networks | – | Sep 8 | img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter |
| CVE-2005-0431 | BS Barracuda Spam Firewall Barracuda Networks | – | May 2 | Barracuda Spam Firewall 3.1.10 and earlier does not restrict the domains that white-listed domains can send mail to, which allows members of white-listed domains to use Barracuda… |