CVE-2023-2868
Barracuda Networks ESG Appliance Improper Input Validation Vulnerability
Barracuda Networks · Email Security Gateway (ESG) Appliance
Vulnerability details
Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection.
Added to CISA KEV: 2023-05-26
Ransomware campaign use: Unknown
CISA due date: 2023-06-16
Defensive guidance from CISA
Apply updates per vendor instructions.
This is the source's required-action field, not an independently validated patch procedure. Refer to the vendor for exact affected versions and fixes.
Source catalog date: 2026-11-06T19:44:45.1797Z · Last retrieved: 2026-11-06 21:02:26 UTC