CVE-2026-111560 Barracuda Networks Barracuda Email Security…
Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the…
- CVSS
- 8.6 High
- EPSS
- 6.2%
- Percentile
- 94
- Published
- 2026-11-02
- Force
- 10 of 12
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
On CISA’s exploited list
Barracuda Networks Multiple Products OS Command Injection Vulnerability
- Added
- 2026-11-10
- Federal patch deadline
- 2026-11-13
- Ransomware use
- not known