Skip to main content
Apexward Pulse
3 reportsPriority Medium

Barracuda Networks authentication bypass and command injection vulnerabilities

A critical vulnerability in Barracuda Networks email security gateways allows unauthenticated attackers to bypass authentication and execute commands with root privileges, posing a significant risk to UK organisations.

First report Latest

What is going on

  • Barracuda Networks identified an authentication bypass vulnerability in its Email Security Gateway that could allow unauthenticated attackers to access administrative functions.
  • A separate command injection vulnerability was also reported, enabling authenticated administrators to execute OS commands with root privileges.
  • Both vulnerabilities are listed in the known-exploited catalogue and have been assigned CVE identifiers.
  • The vulnerabilities affect multiple Barracuda products and were disclosed on the same day.
  • Affected organisations are advised to apply available patches or mitigations promptly.
  • What to watch: Further details about the exploitation methods or confirmation of active attacks against UK organisations could change the assessment of this threat.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed