Skip to content
Edition of Sunday, November 8, 2026
Daily CISO

The five-minute briefing for security leaders.

Security vendor · Email security · in CISA KEV

Barracuda Networks in the CISA KEV catalog

CISA’s Known Exploited Vulnerabilities catalog lists 1 entry for Barracuda Networks as of catalog version 2026.11.06, released November 6, 2026. The newest was added May 26, 2023, and the latest federal due date is June 16, 2023.

Updated

entry in the catalog
1
newest addition
May 26, 2023
latest federal due date
June 16, 2023
marked known ransomware use
0

Directory record

Website
www.barracuda.com
Categories
Email security (primary), WAF and WAAP, Data loss prevention, MDR and managed SOC
Headquarters
HQ not established
Founded
Not established
Ownership
Owned by KKR since 2022
Company record
Barracuda Networks on CISO Tribune

Directory data as of November 8, 2026. What the company sells, and the source for every fact, is on its CISO Tribune page.

KEV entries, newest first

Filed by CISA under the name “Barracuda Networks”. Each row links to the CVE’s NVD record; entries added in the last 45 days also link to their place on must-patch. The due date is CISA’s remediation deadline for federal civilian agencies, as the feed states it.

  1. Added May 26, 2023

    CVE-2023-2868 Barracuda Networks ESG Appliance Improper Input Validation Vulnerability

    Email Security Gateway (ESG) Appliance

    Due June 16, 2023

Snapshot of CISA’s feed taken November 7, 2026; the whole catalog is counted on the KEV tracker.

On Daily CISO, newest first

  1. Weekly archive · Sep 4 – Sep 10, 2023

    CISA Publishes Malware Analysis of Barracuda ESG Backdoors

  2. Weekly archive · Aug 7 – Aug 13, 2023

    CISA Details SEASPY and WHIRLPOOL Backdoors From Barracuda ESG Compromise

  3. Weekly archive · Jul 31 – Aug 6, 2023

    CISA Flags New SUBMARINE Backdoor in Barracuda ESG Attacks

  4. Weekly archive · Jul 24 – Jul 30, 2023

    CISA publishes analysis of the Barracuda ESG backdoors

  5. Weekly archive · Jun 12 – Jun 18, 2023

    Barracuda Updates Advisory on Exploited Email Security Gateway Flaw

  6. Weekly archive · May 29 – Jun 4, 2023

    Barracuda ESG appliances were exploited from October 2022

  7. Weekly archive · May 22 – May 28, 2023

    Barracuda Email Security Gateway exploited through CVE-2023-2868

Sources

  1. Cybersecurity and Infrastructure Security Agency, KEV catalog · primary source
  2. Cybersecurity and Infrastructure Security Agency, KEV JSON feed (catalog version 2026.11.06), published November 6, 2026 · primary source
  3. CISO Tribune, vendor directory record for Barracuda Networks, published November 8, 2026