← Back to browse · API

CVE-2023-2868

Severity
CRITICAL
CVSS
9.4
EPSS
0.87449
Risk score
93.21
CISA KEV
Yes
PoC
No
Published
2023-05-26
Modified
2023-05-26
First seen
2026-08-07
Aliases
EUVD-2023-34316, GHSA-898G-HMH5-HRCR
Products
Barracuda Networks:Email Security Gateway (ESG) Appliance, Barracuda:Barracuda Email Security Gateway 5.1.3.001 <9.2.0.006
Sources
euvd EUVD-2023-34316
cisa.gov CVE-2023-2868

Description

Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection.

References