CVE-2023-26213

On Barracuda CloudGen WAN Private Edge Gateway devices before 8 webui-sdwan-1089-8.3.1-174141891, an OS command injection vulnerability exists in /ajax/update_certificate - a crafted HTTP request allows an authenticated attacker to execute arbitrary commands. For example, a name field can contain :password and a password field can contain shell metacharacters.

• CWE-78
• CWE-78

• http://seclists.org/fulldisclosure/2023/Mar/2Exploit, Mailing List, Third Party Advisory
• https://campus.barracuda.com/product/cloudgenwan/doc/96024723/release-notes-8-3-1/Release Notes
• https://sec-consult.com/vulnerability-lab/advisory/os-command-injection-in-barracuda-cloudgen-wan/Exploit, Third Party Advisory
• https://www.barracuda.com/products/network-security/cloudgen-wanProduct
• http://seclists.org/fulldisclosure/2023/Mar/2Exploit, Mailing List, Third Party Advisory
• https://campus.barracuda.com/product/cloudgenwan/doc/96024723/release-notes-8-3-1/Release Notes
• https://sec-consult.com/vulnerability-lab/advisory/os-command-injection-in-barracuda-cloudgen-wan/Exploit, Third Party Advisory
• https://www.barracuda.com/products/network-security/cloudgen-wanProduct

Published

Mar 3, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-26207An insertion of sensitive information into log file vulnerab…6.5
• CVE-2023-26208A improper restriction of excessive authentication attempts …5.3
• CVE-2023-26209A improper restriction of excessive authentication attempts …5.3
• CVE-2023-2621 The McFeeder server (distributed as part of SSW package), i…6.5
• CVE-2023-26210Multiple improper neutralization of special elements used in…7.8
• CVE-2023-26211An improper neutralization of input during web page generati…9
• CVE-2023-26214The BusinessConnect UI component of TIBCO Software Inc.'s TI…5.4
• CVE-2023-26215The server component of TIBCO Software Inc.'s TIBCO EBX Add-…6.5
• CVE-2023-26216The server component of TIBCO Software Inc.'s TIBCO EBX Add-…7.2
• CVE-2023-26217The Data Exchange Add-on component of TIBCO Software Inc.'s …8.8
• CVE-2023-26218The Web Client component of TIBCO Software Inc.'s TIBCO Nimb…9
• CVE-2023-26219The Hawk Console and Hawk Agent components of TIBCO Software…8.8