sign in--:--:--UTC

CVE-2023-2868

exploited in the wild☆ pin

CVSS

9.8

Reports

2

First seen

Jun 21, 2023

Last seen

Feb 19, 2026

Affected product

Barracuda Email Security Gateway (ESG) versions 5.1.3.001 through 9.2.0.006

Associated actors

APT28 ×1 APT 41 ×1 Curious Serpens ×1 Salt Typhoon ×1 SheldIO ×1 Storm-0501 ×1 UNC4841 ×1 Void Blizzard ×1

Recent reports

2025 Cloud Threat Hunting and Defense Landscape

Recorded Future InsiktFeb 19, 2026 Critical

Barracuda Email Security Gateway Remote Code Execution Vulnerability (CVE-2023-2868)

NICS TaiwanJun 21, 2023

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans