barracuda_email_security_gateway_esg vulnerabilities
CVEs whose affected-version data names the barracuda_email_security_gateway_esg package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-111560High· 8.6OS Command Injection in Barracuda Appliances
Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root pr…
▾ TwilightBarracuda Networks · Barracuda Email Security Gateway (ESG)EPSS 0.47%via CVEORG
CVE-2026-116606Critical· 9.3Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway
An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting …
▾ MidnightBarracuda Networks · Barracuda Email Security Gateway (ESG)EPSS 0.73%via CVEORG