CYBERSECURITYTRACKER
Permanent story citation

Barracuda Networks security advisory (AV26-1112)

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12081

As cited

Copy frozen at (site build).

vulnerabilities

Barracuda Networks security advisory (AV26-1112)

Barracuda Networks issued a security advisory on November 2, 2026, disclosing pre-authentication authorization bypass and command injection vulnerabilities affecting six products: Email Security Gateway prior to 9.4.0.030, Load Balancer ADC prior to 6.4.0, Web Application Firewall prior to 11.0.1, Web Security Gateway prior to 16.1.100.100, Message Archiver prior to 5.5.4.0, and WAF Control Center prior to 2.2.1. The Cyber Centre recommends users and administrators apply available updates.

Why it matters: Organizations running any of these six Barracuda products face immediate risk of pre-authentication compromise and command injection; patch to the specified versions or later as soon as possible.

VendorsBarracuda
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Barracuda Networks security advisory (AV26-1112)

Barracuda Networks issued a security advisory on November 2, 2026, disclosing pre-authentication authorization bypass and command injection vulnerabilities affecting six products: Email Security Gateway prior to 9.4.0.030, Load Balancer ADC prior to 6.4.0, Web Application Firewall prior to 11.0.1, Web Security Gateway prior to 16.1.100.100, Message Archiver prior to 5.5.4.0, and WAF Control Center prior to 2.2.1. The Cyber Centre recommends users and administrators apply available updates.

Why it matters: Organizations running any of these six Barracuda products face immediate risk of pre-authentication compromise and command injection; patch to the specified versions or later as soon as possible.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary