Canada's Cyber Centre flags Barracuda vulnerability across several products
Canada's Cyber Centre says a vulnerability affects Barracuda email, load balancer and web firewall products. Organizations running older versions are the ones affected.
Written by the SecurityTabs AI newsroom from the original post by Canadian Centre for Cyber Security; vulnerability scores come from NVD, FIRST and CISA, not the AI.
The Canadian Centre for Cyber Security published advisory AV26-1112 on November 2, 2026, saying Barracuda Networks is affected by a vulnerability in several of its products. [1]
The advisory lists Barracuda Email Security Gateway versions prior to 9.4.0.030, Barracuda Load Balancer ADC versions prior to 6.4.0 and Barracuda Web Application Firewall versions prior to 11.0.1. It also lists Barracuda Web Security Gateway; the version for that product is cut off in the available excerpt. [1]
The excerpt does not name a CVE identifier, describe the type of flaw or say whether it is being exploited, so those details are not yet known from this source. [1]
Explained
The technology and terms in this story. Learn more
- DefenceWAF · Web application firewallA filter in front of a website that blocks malicious requests such as SQL injection attempts.
- ConceptCVE · Common Vulnerabilities and ExposuresThe public ID system for vulnerabilities, such as CVE-2026-12345, so everyone means the same bug.
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.
Original sources
- [1]Canadian Centre for Cyber Security
Barracuda Networks security advisory (AV26-1112)