Barracuda Networks Multiple Products: Barracuda Networks Multiple Products OS Command Injection Vulnerability
- Level
- Minor (1/5)
- Command
- CYBERCOM
- Region
- Cyber
- Category
- Cyber threat
- Source
- CISA Known Exploited Vulnerabilities
Cyber ThreatMinor (1/5)Official statement28th Cyber threat alert in the last 30 days
At a glance
- What
- Cyber Threat
- Who
- CISA Known Exploited Vulnerabilities
- When
- Nov 10, 2026 at 12:00 AM UTC
- Pace
- 28th Cyber threat alert at severity 1+ in the last 30 days
Official Statements
CISA Known Exploited Vulnerabilities, November 10: “Barracuda Networks Email Security Gateway (ESG), Load Balancer, Application Delivery Controller (ADC), Message Archiver (BMA), WAF Control Center (WCC), Web Application Firewall (WAF), and Web Security Gateway (WSG) contain an OS command injection vulnerability.
This vulnerability could allow an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently processed.
This vulnerability can be chained with CVE-2026-116606”
Source: CISA Known Exploited Vulnerabilities
