KEV Entry

CVE-2026-111560

Known Exploited Vulnerability Entry Previdian

Back to Catalog View Vulnerability
Entry Details
Confirmed Exploited

CVE-2026-111560

2026-11-10 19:20 UTC

Timestamps

2026-11-10

2026-11-10

Scope

OS Command Injection in Barracuda Appliances | Affected: Barracuda / Barracuda Email Security Gateway (ESG), Barracuda Load Balancer Application Delivery Controller (ADC), Barracuda Web Application Firewall (WAF), Barracuda Web Security Gateway (WSG), Barracuda Message Archiver (BMA), Barracuda WAF Control Center (WCC) | CVSS: 8.6 (HIGH) | EPSS: 0.0106 | Used in malware: unknown | Not yet in CISA KEV: False

References
  • {'id': 'CVE-2026-111560', 'url': 'https://www.cve.org/CVERecord?id=CVE-2026-111560'}
  • {'id': 'previdian', 'url': 'https://previdian.com/CVE-2026-111560'}

db1a53cf-c399-45d8-9b59-a2bc7c311e6a

Previdian
caeb2787-0d58-4236-9039-7c86c3e566f3

2026-11-11 20:00 UTC

2026-11-11 20:00 UTC

Evidence
1
Type Source Signal Confidence Details GCVE Metadata
public_report previdian successful_exploitation 0.70
View details 
{
  "added_date": "2026-11-10T19:20:53.998Z",
  "ahead_of_cisa_kev": null,
  "cve_id": "CVE-2026-111560",
  "cvss_estimated": false,
  "cvss_score": 8.6,
  "cvss_severity": "HIGH",
  "epss_percentile": 0.6483,
  "epss_score": 0.0106,
  "feed": "Previdian (previdian.com)",
  "ghsa_id": null,
  "not_yet_in_cisa_kev": false,
  "previous_ids": [],
  "product": "Barracuda Email Security Gateway (ESG), Barracuda Load Balancer Application Delivery Controller (ADC), Barracuda Web Application Firewall (WAF), Barracuda Web Security Gateway (WSG), Barracuda Message Archiver (BMA), Barracuda WAF Control Center (WCC)",
  "title": "OS Command Injection in Barracuda Appliances",
  "used_in_malware": "unknown",
  "vendor": "Barracuda",
  "virtual_patch": false,
  "vulnerability_id": "CVE-2026-111560"
}
 -
Export Options
JSON Object JSON API View Full Catalog