Barracuda Warns of Zero-Day Exploited to Breach Email Security Gateway Appliances

Email protection and network security services provider Barracuda is warning users about a zero-day flaw that it said has been exploited to breach the company's Email Security Gateway (ESG) appliances.
The zero-day is being tracked as CVE-2023-2868 and has been described as a remote code injection vulnerability affecting versions 5.1.3.001 through 9.2.0.006.
The California-headquartered firm

barracuda breach code code injection cve cve-2023-2868 email email protection email security esg exploited flaw gateway injection network network security network security services protection remote code security security gateway security services services the company vulnerability warning zero-day zero-day flaw