Barracuda vulnerabilities

3 published CVEs name Barracuda among the affected products; CISA lists 1 of them as exploited in the wild.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 0
Critical: 1
Known exploited: 1

Critical 1High 1Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

20201
20231
20251

Known exploitedNewest addition to KEV first

CVE-2023-2868
Remote Code injection in Barracuda Email Security Gateway
Barracuda · Barracuda Email Security Gateway
ExploitedCritical9.4

Newest CVEs

CVE-2025-8319
the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter
Barracuda · Barracuda Message Archiver
Medium6.1
CVE-2023-2868
Remote Code injection in Barracuda Email Security Gateway
Barracuda · Barracuda Email Security Gateway
ExploitedCritical9.4
CVE-2019-5648
LDAP Credential Exposure in Barracuda Load Balancer ADC
Barracuda · Load Balancer ADC
High8.7

Products with the most CVEs

Most common weaknesses