CVE-2023-2868
BN
Barracuda Networks Email Security Gateway (ESG) Appliance
Barracuda Networks ESG Appliance Improper Input Validation Vulnerability
What it is
Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Barracuda Networks entries on the list
- Barracuda Email Security Gateway (ESG) Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-116606 · Nov 10, 2026
- Multiple Products Barracuda Networks Multiple Products OS Command Injection Vulnerability CVE-2026-111560 · Nov 10, 2026