{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Barracuda Networks vulnerabilities","home_page_url":"https://patchfirst.co/vendor/barracuda-networks/","feed_url":"https://patchfirst.co/feed/vendor/barracuda-networks.json","description":"New and newly exploited Barracuda Networks CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2023-7102","url":"https://patchfirst.co/cve/CVE-2023-7102/","title":"CVE-2023-7102: Remote Code Execution (RCE) Vulnerability","content_text":"Barracuda Networks Inc. · Barracuda ESG Appliance. Not in CISA KEV. EPSS 44.6% (higher than 98.8% of CVEs). Public exploit code exists. Named in 1 threat report. Priority 65.0 of 100.","summary":"Remote Code Execution (RCE) Vulnerability","date_published":"2023-12-24T00:00:00.000Z","date_modified":"2024-08-02T08:50:08.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":65,"kev":null,"epss":{"score":0.44575,"percentile":0.98766},"cvss":null,"vendor":"Barracuda Networks Inc.","product":"Barracuda ESG Appliance","techniqueIds":[],"reportCount":1,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-2868#kev","url":"https://patchfirst.co/cve/CVE-2023-2868/","title":"[KEV] CVE-2023-2868: Barracuda Networks ESG Appliance Improper Input Validation Vulnerability","content_text":"Barracuda Networks · Email Security Gateway (ESG) Appliance. In CISA KEV since 2023-05-26. ENISA EUVD lists it as exploited. EPSS 86.8% (higher than 99.74% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1566.001 Spearphishing Attachment; T1059 Command and Scripting Interpreter; T1041 Exfiltration Over C2 Channel; T1105 Ingress Tool Transfer. Priority 69.8 of 100.","summary":"Barracuda Networks ESG Appliance Improper Input Validation Vulnerability","date_published":"2023-05-26T00:00:00.000Z","date_modified":"2026-06-17T05:53:39.000Z","tags":["kev","public-exploit","T1566.001","T1059","T1041","T1105"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2023-05-26","ransomware":false},"epss":{"score":0.86841,"percentile":0.99744},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Barracuda Networks","product":"Email Security Gateway (ESG) Appliance","techniqueIds":["T1566.001","T1059","T1041","T1105"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}}]}