Firetruck

CVE-2023-2868

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Barracuda Email Security GatewayBarracuda / Barracuda Email Security Gateway>= 5.1.3.001, < 9.2.0.006affected