Security
1 min read0 views
CVE-2026-111560: OS Command Injection in Barracuda Appliances (Update: added to CISA KEV)
Update: added to CISA KEV. Certain Barracuda appliance products are affected by a flaw in how the timezone configuration field handles special characters. An authenticated administrator could exploit this to run arbitrary operating system commands with root privileges on the device.
Reading Level🟢Beginner
Listen to this article
Update: added to CISA KEV. Certain Barracuda appliance products are affected by a flaw in how the timezone configuration field handles special characters. An authenticated administrator could exploit this to run arbitrary operating system commands with root privileges on the device.
Original Source
cve.now CISA KEVLike this article
Share this article
Share:
Related Articles
CVE-2026-20320: A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read… (Update: added to CISA KEV)
1 min read·1h ago
CVE-2026-125350: Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (Update: added to CISA KEV)
1 min read·1h ago
CVE-2026-116606: Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway (Update: added to CISA KEV)
1 min read·1h ago