Tag

unc4841

Safeguard articles tagged "unc4841" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

Barracuda ESG CVE-2023-2868 Explained: The Command Injection That Ended in Hardware Replacement

CVE-2023-2868 is a command injection in the Barracuda Email Security Gateway, exploited as a zero-day by UNC4841 for months. Rated CVSS 9.8, it ended with Barracuda advising physical appliance replacement.

Jul 7, 20266 min read