PULSE
ES
FEED
ransomlockbit5 reclama a lcww.com.eg · EG · Not Foundransomlockbit5 reclama a neweramachines.com · US · Manufacturingransomlockbit5 reclama a grupoabg.com · MX · Manufacturingransomqilin reclama a KD Corp · KR · Not Foundransomakira reclama a Videk · GB · Technologyransomakira reclama a Boyle, Pecharich, Cline, Whittington and Stallings · Professional Servicesransom0x00 reclama a bienestarempresarial · MX · Professional Servicesransomiah6477 reclama a middleby · US · Manufacturingransomiah6477 reclama a sunshine-mills · Agriculture and Food Productionransomakira reclama a Svd (Sun Valley Dairy) · US · Agriculture and Food Productionransomqilin reclama a Hocon Gas · NG · Energy & Utilitiesransomqilin reclama a HyperGen · US · Technologyransomqilin reclama a Chattanooga Shooting Supplies · US · Retail & E-Commerceransomqilin reclama a Brame Telecom · BR · Technologyransomlockbit5 reclama a lcww.com.eg · EG · Not Foundransomlockbit5 reclama a neweramachines.com · US · Manufacturingransomlockbit5 reclama a grupoabg.com · MX · Manufacturingransomqilin reclama a KD Corp · KR · Not Foundransomakira reclama a Videk · GB · Technologyransomakira reclama a Boyle, Pecharich, Cline, Whittington and Stallings · Professional Servicesransom0x00 reclama a bienestarempresarial · MX · Professional Servicesransomiah6477 reclama a middleby · US · Manufacturingransomiah6477 reclama a sunshine-mills · Agriculture and Food Productionransomakira reclama a Svd (Sun Valley Dairy) · US · Agriculture and Food Productionransomqilin reclama a Hocon Gas · NG · Energy & Utilitiesransomqilin reclama a HyperGen · US · Technologyransomqilin reclama a Chattanooga Shooting Supplies · US · Retail & E-Commerceransomqilin reclama a Brame Telecom · BR · Technology
← All CVEs
CVE Watch—

CVE-2023-2868

Barracuda Networks ESG Appliance Improper Input Validation Vulnerability

CVSS

—

No CVSS

EPSS

87.7%

p100

KEV

YES

May 26, 2023

Exploit Today

80

0-100

Published: — · Last modified: —

EPSS · 30d
87.7%EPSS · 30 days87.7%
2026-09-162026-10-14
KEV catalog record

Product

Barracuda Networks / Email Security Gateway (ESG) Appliance

Vulnerability

Barracuda Networks ESG Appliance Improper Input Validation Vulnerability

Added to KEV

May 26, 2023

Remediate by

Jun 16, 2023

Known ransomware use

No

Summary description

Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection.

Required action

Apply updates per vendor instructions.

Notes

https://status.barracuda.com/incidents/34kx82j5n4q9; https://nvd.nist.gov/vuln/detail/CVE-2023-2868

Related CVEs

No related CVEs by CWE or product.