Security Advisory

Barracuda Networks Product Security Update Advisory

  • Nov 12 2026
Barracuda Networks Product Security Update Advisory

Overview

Barracuda Networks has released a security update to address a vulnerability discovered in its products. Users of affected products should update to the latest version with the vulnerability patch applied.

Affected Products and Vulnerabilities

  • CVE-2026-111560. – Email Security Gateway (ESG) version 9.4.0.27 or earlier. – Load Balancer Application Delivery Controller (ADC) version 6.4.0 or earlier.
    • Message Archiver (BMA) version 5.5.4.0 or earlier. – WAF Control Center (WCC) version 2.2.1 or earlier. – Web Application Firewall (WAF) version 11.0.1 or earlier.
    • Web Security Gateway (WSG) version 16.1.100.100 or earlier. – CVE-2026-116606. – Email Security Gateway (ESG) version earlier than 9.4.0.030.

Vulnerability Details

  • CVE-2026-111560 is an operating system command injection vulnerability affecting Barracuda ESG, ADC, BMA, WCC, WAF, and WSG.
  • CVE-2026-116606 is a pre-authentication privilege bypass vulnerability affecting Barracuda ESG.

Patch Information

  • CVE-2026-111560. – BNSF-40425 applies to Email Security Gateway (ESG) version 9.4.017 and later.
    • BNSF-40430 applies to Email Security Gateway (ESG) versions prior to 9.4.017. – BNADC-16586 applies to ADC.
    • BNMA-32468 applies to BMA. – BNWF-60060 applies to WCC. – BNADC-16586 applies to WAF.
    • BNYF-24789 applies to WSG. – CVE-2026-116606. – BNSF-40425 applies to Email Security Gateway (ESG) version 9.4.017 or later.
    • BNSF-40430 applies to Email Security Gateway (ESG) versions prior to 9.4.017.

Note

The reference website provides additional guidance regarding Vulnerability Patches.

Tags:
Previous Post

Next Post