Command Injection Vulnerability in Certain Barracuda Networks Products
Overview
Barracuda Networks has identified a vulnerability affecting certain Barracuda Networks products: a command injection vulnerability assigned CVE-2026-111560.
Successful exploitation requires an attacker to have access to the administrative interface of an affected product. If exploited, this vulnerability could allow an attacker to bypass authorization controls and obtain root access to the device.
Barracuda Networks immediately initiated a comprehensive remediation process and released security patches for affected products. Customers should review the affected products and remediation guidance below, ensure their systems are running the latest firmware version, and have all security patches applied.
Affected versions of Web Security Gateway
All versions of the Web Security Gateway (WSG).
Has Barracuda Networks released a patch?
Yes. Barracuda Networks updated firmware versions 15.0.0.009 through 16.1.003.
Action required
Appliances running firmware version 15.0 and below should upgrade to 15.0.0.009 and above. After the update, verify that the appliance reports firmware version 15.0.0.009 or later.
Log in to the Web Security Gateway web interface as an administrator.
Go to Advanced > Firmware Update.
Check the Current Installed Version.
If the appliance is running 15.0.0.009 through 16.1.003, the security update installs the patch.
Alternatively click Update to upgrade to firmware 15.0.0.009.
Allow the upgrade to complete and reboot the appliance, if prompted.
After the appliance is back online, return to Advanced > Firmware Update and confirm the installed version is 15.0.0.009 or later.
How do I confirm whether my appliance has received the security update?
Log in to the Web Security Gateway web interface.
Go to Advanced > Firmware Update.
Check the Current Installed Version.
If the appliance is running firmware version 15.0.0.009 or later, the appliance has received the security update.
If the appliance is running an earlier affected firmware version, follow the steps in Action required (above) to update the appliance to firmware 15.0.0.009, then repeat this confirmation process after the appliance restarts.
Additional resources
Contact Barracuda Networks Technical Support for any additional questions.