Barracuda Networks Email Security Gateway und Web Application Firewall: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Barracuda Networks Email Security Gateway und Barracuda Networks Web Application Firewall ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen und die Authentifizierung zu umgehen.…
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-42952 linked CVEs
Open advisory with all CVEs
More on Application
Other advisories
- HighCVE-2026-91867IBM WebSphere Application Server: Mehrere Schwachstellen ermöglichen Denial of Service
- HighCVE-2026-5598Red Hat JBoss Enterprise Application Platform (bouncycastle): Schwachstelle ermöglicht Offenlegung von Informationen
- Highbsi:WID-SEC-2025-0135Oracle Communications Applications: Mehrere Schwachstellen
- HighCVE-2026-78636IBM WebSphere Application Server Liberty: Mehrere Schwachstellen
- Not ratedosv:CVE-2026-120638CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect
- Not ratedosv:GHSA-m3qr-fvp4-78xjArc has unauthenticated application log disclosure via `/api/v1/logs`
- Lowghsa:GHSA-m3qr-fvp4-78xjArc has unauthenticated application log disclosure via `/api/v1/logs`
- Not ratedosv:CVE-2026-121587Coolify before 4.1.1 Application Name Enumeration via Manual Webhook Endpoints
Other news entries
- The Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)NewsSANS ISC Diary
- IBM WebSphere Application Server: Mehrere Schwachstellen ermöglichen Denial of ServiceVulnerabilityBSI CERT-Bund
- Oracle Communications Applications: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- IBM WebSphere Application Server Liberty: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Fintech platform Sageworks taken offline after suspected cyberattackNewsBleepingComputer
- Who approves the files that control your AI coding assistant?NewsCSO Online
- Northflank security breach leads to abuse of customers' AI API keysNewsBleepingComputer
- Choosing a WAAP in 2026: 3 questions that separate the shortlistNewsCSO Online
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4295
ID