Barracuda Networks security advisory (AV26-1112)

Serial Number: AV26-1112
Date: November 2, 2026

As of November 2, 2026, Barracuda Networks is affected by a vulnerability in the following products:

• Barracuda Email Security Gateway (ESG)
  • Prior to 9.4.0.030
• Barracuda Load Balancer Application Delivery Controller (ADC)
  • Prior to 6.4.0
• Barracuda Web Application Firewall (WAF)
  • Prior to 11.0.1
• Barracuda Web Security Gateway (WSG)
  • Prior to 16.1.100.100
• Barracuda Message Archiver (BMA)
  • Prior to 5.5.4.0
• Barracuda WAF Control Center (WCC)
  • Prior to 2.2.1

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Pre-Authentication Authorization Bypass and Command Injection Vulnerabilities in Certain Barracuda Products — Updates Available
• Barracuda Product Security Advisories