Alert: Hackers Exploit Barracuda Email Security Gateway 0-Day Flaw for 7 Months

Enterprise security firm Barracuda on Tuesday disclosed that a recently patched zero-day flaw in its Email Security Gateway (ESG) appliances had been abused by threat actors since October 2022 to backdoor the devices.
The latest findings show that the critical vulnerability, tracked as CVE-2023-2868 (CVSS score: N/A), has been actively exploited for at least seven months prior to its discovery.

alert backdoor barracuda critical critical vulnerability cve cve-2023-2868 cvss devices email email security enterprise enterprise security esg exploit findings flaw gateway hackers latest october score security security gateway threat threat actors tuesday vulnerability zero-day zero-day flaw