barracuda

Top products

The 15 most recently published vulnerabilities affecting barracuda.

• CVE-2025-34395Barracuda RMM < 2025.1.1 Service Center .NET Remoting Path Traversal RCE7.5Dec 10, 2025
• CVE-2025-34394Barracuda RMM < 2025.1.1 Service Center .NET Remoting Deserialization RCE9.8Dec 10, 2025
• CVE-2025-34393Barracuda RMM < 2025.1.1 Service Center Insecure Reflection RCE9.8Dec 10, 2025
• CVE-2025-34392Barracuda RMM < 2025.1.1 Service Center Absolute Path Traversal RCE9.8Dec 10, 2025
• CVE-2023-7102Remote Code Execution (RCE) Vulnerability9.8Dec 24, 2023
• CVE-2023-2868Remote Code injection in Barracuda Email Security GatewayKEV9.4May 24, 2023
• CVE-2021-42711Barracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with Insecure Permissions. This file is executed with SYSTEM privileges when an unprivileged user performs a rep...7.8Dec 1, 2021
• CVE-2019-5648LDAP Credential Exposure in Barracuda Load Balancer ADC6.5Mar 12, 2020
• CVE-2019-6724The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process and can allow an unprivileged local attacker to load a mal...7.8Mar 18, 2019
• CVE-2018-20369Barracuda Message Archiver 2018 has XSS in the error_msg exception-handling value for the ldap_user parameter to the cgi-mod/ldap_load_entry.cgi module. The injection point of the issue is the Add_...6.1Dec 23, 2018
• CVE-2014-8428Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key.9.8Aug 28, 2017
• CVE-2014-8426Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015.9.8Aug 28, 2017
• CVE-2017-6320A remote command injection vulnerability exists in the Barracuda Load Balancer product line (confirmed on v5.4.0.004 (2015-11-26) and v6.0.1.006 (2016-08-19); fixed in 6.1.0.003 (2017-01-17)) in wh...8.8Jul 18, 2017
• CVE-2015-0961Barracuda Web Filter before 8.1.0.005, when SSL Inspection is enabled, does not verify X.509 certificates from upstream SSL servers, which allows man-in-the-middle attackers to spoof servers and ob...4.3May 25, 2015
• CVE-2015-0962Barracuda Web Filter 7.x and 8.x before 8.1.0.005, when SSL Inspection is enabled, uses the same root Certification Authority certificate across different customers' installations, which makes it e...4.3May 25, 2015