CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-111560

Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently processed.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.062

EPSS Ranking 93.6%

CVSS Severity

CVSS v3 Score 7.2

Proposed Action

Barracuda Networks Email Security Gateway (ESG), Load Balancer, Application Delivery Controller (ADC), Message Archiver (BMA), WAF Control Center (WCC), Web Application Firewall (WAF), and Web Security Gateway (WSG) contain an OS command injection vulnerability. This vulnerability could allow an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently processed. This vulnerability can be chained with CVE-2026-116606

Ransomware Campaign

Unknown

References

Products affected by CVE-2026-111560

Barracuda » Load Balancer Adc 340vx » Version: N/A

cpe:2.3:a:barracuda:load_balancer_adc_340vx:-
Barracuda » Load Balancer Adc 440vx » Version: N/A

cpe:2.3:a:barracuda:load_balancer_adc_440vx:-
Barracuda » Load Balancer Adc 540vx » Version: N/A

cpe:2.3:a:barracuda:load_balancer_adc_540vx:-
Barracuda » Load Balancer Adc 640vx » Version: N/A

cpe:2.3:a:barracuda:load_balancer_adc_640vx:-
Barracuda » Message Archiver 1050vx » Version: N/A

cpe:2.3:a:barracuda:message_archiver_1050vx:-
Barracuda » Message Archiver 150vx » Version: N/A

cpe:2.3:a:barracuda:message_archiver_150vx:-
Barracuda » Message Archiver 350vx » Version: N/A

cpe:2.3:a:barracuda:message_archiver_350vx:-
Barracuda » Message Archiver 450vx » Version: N/A

cpe:2.3:a:barracuda:message_archiver_450vx:-
Barracuda » Message Archiver 650vx » Version: N/A

cpe:2.3:a:barracuda:message_archiver_650vx:-
Barracuda » Message Archiver 850vx » Version: N/A

cpe:2.3:a:barracuda:message_archiver_850vx:-
Barracuda » Message Archiver 950vx » Version: N/A

cpe:2.3:a:barracuda:message_archiver_950vx:-
Barracuda » Web Application Firewall » Version: 7.8.1.013

cpe:2.3:a:barracuda:web_application_firewall:7.8.1.013
Barracuda » Web Security Gateway 310vx » Version: N/A

cpe:2.3:a:barracuda:web_security_gateway_310vx:-
Barracuda » Web Security Gateway 410vx » Version: N/A

cpe:2.3:a:barracuda:web_security_gateway_410vx:-
Barracuda » Web Security Gateway 610vx » Version: N/A

cpe:2.3:a:barracuda:web_security_gateway_610vx:-
Barracuda » Email Security Gateway 300 » Version: N/A

cpe:2.3:h:barracuda:email_security_gateway_300:-
Barracuda » Email Security Gateway 400 » Version: N/A

cpe:2.3:h:barracuda:email_security_gateway_400:-
Barracuda » Email Security Gateway 600 » Version: N/A

cpe:2.3:h:barracuda:email_security_gateway_600:-
Barracuda » Email Security Gateway 800 » Version: N/A

cpe:2.3:h:barracuda:email_security_gateway_800:-
Barracuda » Email Security Gateway 900 » Version: N/A

cpe:2.3:h:barracuda:email_security_gateway_900:-
Barracuda » Load Balancer Adc 340 » Version: N/A

cpe:2.3:h:barracuda:load_balancer_adc_340:-
Barracuda » Load Balancer Adc 440 » Version: N/A

cpe:2.3:h:barracuda:load_balancer_adc_440:-
Barracuda » Load Balancer Adc 540 » Version: N/A

cpe:2.3:h:barracuda:load_balancer_adc_540:-
Barracuda » Load Balancer Adc 640 » Version: N/A

cpe:2.3:h:barracuda:load_balancer_adc_640:-
Barracuda » Load Balancer Adc 642 » Version: N/A

cpe:2.3:h:barracuda:load_balancer_adc_642:-
Barracuda » Load Balancer Adc 840 » Version: N/A

cpe:2.3:h:barracuda:load_balancer_adc_840:-
Barracuda » Load Balancer Adc 841 » Version: N/A

cpe:2.3:h:barracuda:load_balancer_adc_841:-
Barracuda » Load Balancer Adc 842 » Version: N/A

cpe:2.3:h:barracuda:load_balancer_adc_842:-
Barracuda » Message Archiver 1050 » Version: N/A

cpe:2.3:h:barracuda:message_archiver_1050:-
Barracuda » Message Archiver 150 » Version: N/A

cpe:2.3:h:barracuda:message_archiver_150:-
Barracuda » Message Archiver 350 » Version: N/A

cpe:2.3:h:barracuda:message_archiver_350:-
Barracuda » Message Archiver 450 » Version: N/A

cpe:2.3:h:barracuda:message_archiver_450:-
Barracuda » Message Archiver 650 » Version: N/A

cpe:2.3:h:barracuda:message_archiver_650:-
Barracuda » Message Archiver 850 » Version: N/A

cpe:2.3:h:barracuda:message_archiver_850:-
Barracuda » Message Archiver 950 » Version: N/A

cpe:2.3:h:barracuda:message_archiver_950:-
Barracuda » Web Security Gateway 1010 » Version: N/A

cpe:2.3:h:barracuda:web_security_gateway_1010:-
Barracuda » Web Security Gateway 1011 » Version: N/A

cpe:2.3:h:barracuda:web_security_gateway_1011:-
Barracuda » Web Security Gateway 210 » Version: N/A

cpe:2.3:h:barracuda:web_security_gateway_210:-
Barracuda » Web Security Gateway 310 » Version: N/A

cpe:2.3:h:barracuda:web_security_gateway_310:-
Barracuda » Web Security Gateway 410 » Version: N/A

cpe:2.3:h:barracuda:web_security_gateway_410:-
Barracuda » Web Security Gateway 610 » Version: N/A

cpe:2.3:h:barracuda:web_security_gateway_610:-
Barracuda » Web Security Gateway 610b » Version: N/A

cpe:2.3:h:barracuda:web_security_gateway_610b:-
Barracuda » Web Security Gateway 810 » Version: N/A

cpe:2.3:h:barracuda:web_security_gateway_810:-
Barracuda » Web Security Gateway 810b » Version: N/A

cpe:2.3:h:barracuda:web_security_gateway_810b:-
Barracuda » Web Security Gateway 910 » Version: N/A

cpe:2.3:h:barracuda:web_security_gateway_910:-
Barracuda » Email Security Gateway 300 Firmware » Version: N/A

cpe:2.3:o:barracuda:email_security_gateway_300_firmware:-
Barracuda » Email Security Gateway 300 Firmware » Version: 5.1.3.001

cpe:2.3:o:barracuda:email_security_gateway_300_firmware:5.1.3.001
Barracuda » Email Security Gateway 300 Firmware » Version: 9.2.0.006

cpe:2.3:o:barracuda:email_security_gateway_300_firmware:9.2.0.006
Barracuda » Email Security Gateway 400 Firmware » Version: N/A

cpe:2.3:o:barracuda:email_security_gateway_400_firmware:-
Barracuda » Email Security Gateway 400 Firmware » Version: 5.1.3.001

cpe:2.3:o:barracuda:email_security_gateway_400_firmware:5.1.3.001
Barracuda » Email Security Gateway 400 Firmware » Version: 9.2.0.006

cpe:2.3:o:barracuda:email_security_gateway_400_firmware:9.2.0.006
Barracuda » Email Security Gateway 600 Firmware » Version: N/A

cpe:2.3:o:barracuda:email_security_gateway_600_firmware:-
Barracuda » Email Security Gateway 600 Firmware » Version: 5.1.3.001

cpe:2.3:o:barracuda:email_security_gateway_600_firmware:5.1.3.001
Barracuda » Email Security Gateway 600 Firmware » Version: 9.2.0.006

cpe:2.3:o:barracuda:email_security_gateway_600_firmware:9.2.0.006
Barracuda » Email Security Gateway 800 Firmware » Version: N/A

cpe:2.3:o:barracuda:email_security_gateway_800_firmware:-
Barracuda » Email Security Gateway 800 Firmware » Version: 5.1.3.001

cpe:2.3:o:barracuda:email_security_gateway_800_firmware:5.1.3.001
Barracuda » Email Security Gateway 800 Firmware » Version: 9.2.0.006

cpe:2.3:o:barracuda:email_security_gateway_800_firmware:9.2.0.006
Barracuda » Email Security Gateway 900 Firmware » Version: N/A

cpe:2.3:o:barracuda:email_security_gateway_900_firmware:-
Barracuda » Email Security Gateway 900 Firmware » Version: 5.1.3.001

cpe:2.3:o:barracuda:email_security_gateway_900_firmware:5.1.3.001
Barracuda » Email Security Gateway 900 Firmware » Version: 9.2.0.006

cpe:2.3:o:barracuda:email_security_gateway_900_firmware:9.2.0.006
Barracuda » Load Balancer Adc Firmware » Version: 5.2.0.004

cpe:2.3:o:barracuda:load_balancer_adc_firmware:5.2.0.004
Barracuda » Load Balancer Adc Firmware » Version: 5.3.0.002

cpe:2.3:o:barracuda:load_balancer_adc_firmware:5.3.0.002
Barracuda » Load Balancer Adc Firmware » Version: 5.3.0.003

cpe:2.3:o:barracuda:load_balancer_adc_firmware:5.3.0.003
Barracuda » Load Balancer Adc Firmware » Version: 5.4.0.003

cpe:2.3:o:barracuda:load_balancer_adc_firmware:5.4.0.003
Barracuda » Load Balancer Adc Firmware » Version: 5.4.0.004

cpe:2.3:o:barracuda:load_balancer_adc_firmware:5.4.0.004
Barracuda » Load Balancer Adc Firmware » Version: 6.0.0.004

cpe:2.3:o:barracuda:load_balancer_adc_firmware:6.0.0.004
Barracuda » Load Balancer Adc Firmware » Version: 6.0.0.005

cpe:2.3:o:barracuda:load_balancer_adc_firmware:6.0.0.005
Barracuda » Load Balancer Adc Firmware » Version: 6.0.0.008

cpe:2.3:o:barracuda:load_balancer_adc_firmware:6.0.0.008
Barracuda » Load Balancer Adc Firmware » Version: 6.0.1.005

cpe:2.3:o:barracuda:load_balancer_adc_firmware:6.0.1.005
Barracuda » Load Balancer Adc Firmware » Version: 6.0.1.006

cpe:2.3:o:barracuda:load_balancer_adc_firmware:6.0.1.006
Barracuda » Load Balancer Adc Firmware » Version: 6.1.0.003

cpe:2.3:o:barracuda:load_balancer_adc_firmware:6.1.0.003
Barracuda » Load Balancer Adc Firmware » Version: 6.1.0.004

cpe:2.3:o:barracuda:load_balancer_adc_firmware:6.1.0.004
Barracuda » Load Balancer Adc Firmware » Version: 6.1.0.005

cpe:2.3:o:barracuda:load_balancer_adc_firmware:6.1.0.005
Barracuda » Load Balancer Adc Firmware » Version: 6.1.0.006

cpe:2.3:o:barracuda:load_balancer_adc_firmware:6.1.0.006
Barracuda » Load Balancer Adc Firmware » Version: 6.1.0.007

cpe:2.3:o:barracuda:load_balancer_adc_firmware:6.1.0.007
Barracuda » Load Balancer Adc Firmware » Version: 6.2.0.005

cpe:2.3:o:barracuda:load_balancer_adc_firmware:6.2.0.005
Barracuda » Load Balancer Adc Firmware » Version: 6.3.0.004

cpe:2.3:o:barracuda:load_balancer_adc_firmware:6.3.0.004
Barracuda » Load Balancer Adc Firmware » Version: 6.3.0.005

cpe:2.3:o:barracuda:load_balancer_adc_firmware:6.3.0.005
Barracuda » Message Archiver Firmware » Version: 4.0.0.010

cpe:2.3:o:barracuda:message_archiver_firmware:4.0.0.010
Barracuda » Message Archiver Firmware » Version: 4.0.0.011

cpe:2.3:o:barracuda:message_archiver_firmware:4.0.0.011
Barracuda » Message Archiver Firmware » Version: 4.0.0.013

cpe:2.3:o:barracuda:message_archiver_firmware:4.0.0.013
Barracuda » Message Archiver Firmware » Version: 4.0.0.015

cpe:2.3:o:barracuda:message_archiver_firmware:4.0.0.015
Barracuda » Message Archiver Firmware » Version: 4.0.0.022

cpe:2.3:o:barracuda:message_archiver_firmware:4.0.0.022
Barracuda » Message Archiver Firmware » Version: 4.0.0.023

cpe:2.3:o:barracuda:message_archiver_firmware:4.0.0.023
Barracuda » Message Archiver Firmware » Version: 4.0.1.012

cpe:2.3:o:barracuda:message_archiver_firmware:4.0.1.012
Barracuda » Message Archiver Firmware » Version: 4.0.1.013

cpe:2.3:o:barracuda:message_archiver_firmware:4.0.1.013
Barracuda » Message Archiver Firmware » Version: 4.0.1.022

cpe:2.3:o:barracuda:message_archiver_firmware:4.0.1.022
Barracuda » Message Archiver Firmware » Version: 4.1.0.004

cpe:2.3:o:barracuda:message_archiver_firmware:4.1.0.004
Barracuda » Message Archiver Firmware » Version: 4.1.0.007

cpe:2.3:o:barracuda:message_archiver_firmware:4.1.0.007
Barracuda » Message Archiver Firmware » Version: 4.1.0.009

cpe:2.3:o:barracuda:message_archiver_firmware:4.1.0.009
Barracuda » Message Archiver Firmware » Version: 5.0.0.003

cpe:2.3:o:barracuda:message_archiver_firmware:5.0.0.003
Barracuda » Message Archiver Firmware » Version: 5.0.0.004

cpe:2.3:o:barracuda:message_archiver_firmware:5.0.0.004
Barracuda » Message Archiver Firmware » Version: 5.0.0.008

cpe:2.3:o:barracuda:message_archiver_firmware:5.0.0.008
Barracuda » Message Archiver Firmware » Version: 5.0.0.012

cpe:2.3:o:barracuda:message_archiver_firmware:5.0.0.012
Barracuda » Message Archiver Firmware » Version: 5.0.1

cpe:2.3:o:barracuda:message_archiver_firmware:5.0.1
Barracuda » Message Archiver Firmware » Version: 5.1.0.004

cpe:2.3:o:barracuda:message_archiver_firmware:5.1.0.004
Barracuda » Message Archiver Firmware » Version: 5.1.0.005

cpe:2.3:o:barracuda:message_archiver_firmware:5.1.0.005
Barracuda » Message Archiver Firmware » Version: 5.1.0.006

cpe:2.3:o:barracuda:message_archiver_firmware:5.1.0.006
Barracuda » Message Archiver Firmware » Version: 5.1.0.007

cpe:2.3:o:barracuda:message_archiver_firmware:5.1.0.007
Barracuda » Message Archiver Firmware » Version: 5.1.0.011

cpe:2.3:o:barracuda:message_archiver_firmware:5.1.0.011
Barracuda » Message Archiver Firmware » Version: 5.1.0.012

cpe:2.3:o:barracuda:message_archiver_firmware:5.1.0.012
Barracuda » Message Archiver Firmware » Version: 5.1.1.008

cpe:2.3:o:barracuda:message_archiver_firmware:5.1.1.008
Barracuda » Message Archiver Firmware » Version: 5.1.1.009

cpe:2.3:o:barracuda:message_archiver_firmware:5.1.1.009
Barracuda » Message Archiver Firmware » Version: 5.1.1.012

cpe:2.3:o:barracuda:message_archiver_firmware:5.1.1.012
Barracuda » Message Archiver Firmware » Version: 5.1.1.014

cpe:2.3:o:barracuda:message_archiver_firmware:5.1.1.014
Barracuda » Message Archiver Firmware » Version: 5.1.1.016

cpe:2.3:o:barracuda:message_archiver_firmware:5.1.1.016
Barracuda » Message Archiver Firmware » Version: 5.1.1.018

cpe:2.3:o:barracuda:message_archiver_firmware:5.1.1.018
Barracuda » Message Archiver Firmware » Version: 5.2.0.005

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.0.005
Barracuda » Message Archiver Firmware » Version: 5.2.0.009

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.0.009
Barracuda » Message Archiver Firmware » Version: 5.2.0.010

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.0.010
Barracuda » Message Archiver Firmware » Version: 5.2.0.018

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.0.018
Barracuda » Message Archiver Firmware » Version: 5.2.0.022

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.0.022
Barracuda » Message Archiver Firmware » Version: 5.2.1.007

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.1.007
Barracuda » Message Archiver Firmware » Version: 5.2.2.005

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.2.005
Barracuda » Message Archiver Firmware » Version: 5.2.2.006

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.2.006
Barracuda » Message Archiver Firmware » Version: 5.2.2.007

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.2.007
Barracuda » Message Archiver Firmware » Version: 5.2.2.008

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.2.008
Barracuda » Message Archiver Firmware » Version: 5.2.2.009

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.2.009
Barracuda » Message Archiver Firmware » Version: 5.2.3.002

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.3.002
Barracuda » Message Archiver Firmware » Version: 5.2.3.003

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.3.003
Barracuda » Message Archiver Firmware » Version: 5.2.3.006

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.3.006
Barracuda » Message Archiver Firmware » Version: 5.2.3.009

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.3.009
Barracuda » Message Archiver Firmware » Version: 5.2.4.004

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.4.004
Barracuda » Message Archiver Firmware » Version: 5.2.4.005

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.4.005
Barracuda » Message Archiver Firmware » Version: 5.2.4.006

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.4.006
Barracuda » Message Archiver Firmware » Version: 5.2.5.002

cpe:2.3:o:barracuda:message_archiver_firmware:5.2.5.002
Barracuda » Message Archiver Firmware » Version: 5.3.0.002

cpe:2.3:o:barracuda:message_archiver_firmware:5.3.0.002
Barracuda » Message Archiver Firmware » Version: 5.3.0.006

cpe:2.3:o:barracuda:message_archiver_firmware:5.3.0.006
Barracuda » Message Archiver Firmware » Version: 5.3.0.009

cpe:2.3:o:barracuda:message_archiver_firmware:5.3.0.009
Barracuda » Message Archiver Firmware » Version: 5.4.1.008

cpe:2.3:o:barracuda:message_archiver_firmware:5.4.1.008
Barracuda » Message Archiver Firmware » Version: 5.4.2.002

cpe:2.3:o:barracuda:message_archiver_firmware:5.4.2.002
Barracuda » Message Archiver Firmware » Version: 5.4.3.005

cpe:2.3:o:barracuda:message_archiver_firmware:5.4.3.005
Barracuda » Message Archiver Firmware » Version: 5.5.1.001

cpe:2.3:o:barracuda:message_archiver_firmware:5.5.1.001
Barracuda » Message Archiver Firmware » Version: 5.5.4.001

cpe:2.3:o:barracuda:message_archiver_firmware:5.5.4.001
Barracuda » Web Security Gateway Firmware » Version: 14.1.0.004

cpe:2.3:o:barracuda:web_security_gateway_firmware:14.1.0.004
Barracuda » Web Security Gateway Firmware » Version: 14.1.0.005

cpe:2.3:o:barracuda:web_security_gateway_firmware:14.1.0.005
Barracuda » Web Security Gateway Firmware » Version: 14.1.0.006

cpe:2.3:o:barracuda:web_security_gateway_firmware:14.1.0.006
Barracuda » Web Security Gateway Firmware » Version: 14.1.0.010

cpe:2.3:o:barracuda:web_security_gateway_firmware:14.1.0.010
Barracuda » Web Security Gateway Firmware » Version: 14.1.0.012

cpe:2.3:o:barracuda:web_security_gateway_firmware:14.1.0.012
Barracuda » Web Security Gateway Firmware » Version: 14.1.0.014

cpe:2.3:o:barracuda:web_security_gateway_firmware:14.1.0.014
Barracuda » Web Security Gateway Firmware » Version: 14.1.0.021

cpe:2.3:o:barracuda:web_security_gateway_firmware:14.1.0.021
Barracuda » Web Security Gateway Firmware » Version: 15.0.0.004

cpe:2.3:o:barracuda:web_security_gateway_firmware:15.0.0.004

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-111560

Products

Pricing

Contact Us