1792831006248
🛡️ Security Advisory: PHP2Shell (CVE-2026-109618 / CVE-2026-109619)
by AppSec Team
On 21 October 2026, the PHP project released fixes for two critical vulnerabilities in PHP, known together as PHP2Shell. If left unpatched, they could allow an attacker to run code on a vulnerable PHP server without logging in. We want to 1776677256873
Datapath Firmware 12.2 is Now "Current".
by AppSec PM Team
ANNOUNCEMENT | DATAPATH LIFECYCLE At Barracuda, your security and application performance are our top priorities. To ensure your environment is always equipped with our strongest protection, we continuously evolve our platform. Today, we 1764860700869
React2Shell : CVE-2025-55182 React & Next.js Remote Code Execution Vulnerabilities.
by AppSec PM Team
Last updated: 2025-12-05 CVE-2025-55182 / CVE -2025-66478 Severity: Critical | CVSS Score : 10 Product Impact Statement: Barracuda WAFaaS , as a platform is not affected by these vulnerabilities. Customer Recommendation: We 1757568003582
CVE Database 2025 !
by WAF PM Team
🚀 Your WAFaaS CVE Database updated! Welcome to a New Era of Security Intelligence We’re thrilled to announce a major upgrade to your WAFaaS experience! Our CVE (Common Vulnerabilities and Exposures) database now includes the latest 1706450400000
Security Advisory
by Vishal Khandelwal
We are hardening WAF-as-a-Service to protect against two design limitations and associated vulnerabilities, discovered in the previous firmware. When an application is in Block mode, under certain configurations is may be possible to 1701944100000
Datapath Upgrade to Version 12.1
by Scott Treacy
We are pleased to announce that we will be upgrading the current datapath from version 12.0 to version 12.1 for all WAF-as-a-Service customers who have Let Barracuda manage my datapath version selected within their WAF-as-a-Service account 1694418960000
Shared IP deployments are now live
by Scott Treacy
We are pleased to announce that Shared IP addressing has now been deployed. All new applications will now use a Shared IP address by default. If your account is licenced with a Application Protection Premium plan or your legacy licence
1690820425262
Change to WAF-as-a-Service IP Addresses and Domain Routing
by Nitzan Miron
Starting in 30 days, we will begin migration of many existing WAF-as-a-Service applications to new IP addresses. Some of these IP addresses may be shared between multiple applications.
1686610380000
OpenSSL Upgrade
by Scott Treacy
Per our Datapath policies, we are informing you that we will be upgrading the version of OpenSSL used in Barracuda WAF-as-a-Service to version 3.0 because version 1.1.1 will become End-of-Life on September 11th 2023.
