Waf

Security incidents tagged Waf. Newest first.

1 Waf incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore

Brought to you byTinkerer Club

The private club for people who own their servers, run their own AI, and pay $0/month for software.

Patched
Barracuda fixes pre-auth authorization bypass and command injection that can yield root
Barracuda Networks disclosed two flaws affecting several appliances: CVE-2026-116606, a pre-authentication authorization bypass in Email Security Gateway, and CVE-2026-111560, a command-injection bug affecting ESG, Load Balancer ADC, Message Archiver, WAF Control Center, Web Application Firewall and Web Security Gateway. Barracuda says successful exploitation needs access to the administrative interface; chained, the bugs can bypass authorization and obtain root. Patches are available per product via Barracuda Campus articles. Restrict admin interfaces to trusted networks and apply the latest firmware immediately. Coverage appeared Nov 3 2026 (BleepingComputer, The Hacker News, CCB Belgium).
Barracuda ESG, ADC, BMA, WCC, WAF, WSGSince Nov 3, 2026updated Nov 4, 2026, 11:40 UTC