Barracuda WAF-as-a-Service Updates

waas.barracudanetworks.com

🛡️ Security Advisory: PHP2Shell (CVE-2026-109618 / CVE-2026-109619)

On 21 October 2026, the PHP project released fixes for two critical vulnerabilities in PHP, known together as PHP2Shell. If left unpatched, they could allow an attacker to run code on a vulnerable PHP server without logging in. We want to

Datapath Firmware 12.2 is Now "Current".

by AppSec PM Team

ANNOUNCEMENT | DATAPATH LIFECYCLE At Barracuda, your security and application performance are our top priorities. To ensure your environment is always equipped with our strongest protection, we continuously evolve our platform. Today, we

React2Shell : CVE-2025-55182 React & Next.js Remote Code Execution Vulnerabilities.

by AppSec PM Team

Last updated: 2025-12-05 CVE-2025-55182 / CVE -2025-66478 Severity: Critical | CVSS Score : 10 Product Impact Statement: Barracuda WAFaaS , as a platform is not affected by these vulnerabilities. Customer Recommendation: We

🔒 Security Enhancement: GitHub Integration Update

by AppSec PM Team, PM

🔒 Security Enhancement: GitHub Integration Update What’s Changing? WAFaaS has updated GitHub integration by restricting direct account creation for GitHub access through the platform. This change is designed to address security risks

Enhanced API Endpoint Discovery with Dynamic Path Variable Detection!

by AppSec PM Team, PM

Hi There ! Securing your APIs just got a whole lot smarter! We know that one of the biggest challenges for security teams and API administrators is keeping track of every endpoint—especially when your APIs use complex, dynamic routing

CVE Database 2025 !

🚀 Your WAFaaS CVE Database updated! Welcome to a New Era of Security Intelligence We’re thrilled to announce a major upgrade to your WAFaaS experience! Our CVE (Common Vulnerabilities and Exposures) database now includes the latest

Session Recording

by Scott Treacy

This past weekend we introduced Session Recording for troubleshooting layer-7 application problems when passing traffic through the WAF-as-a-Service datapath proxies. Those of you who have previously used the Barracuda WAF appliances will

Session Recording

Vulnerability Mapping

by Scott Treacy

We are pleased to announce that we have released Vulnerability mapping for Common Weakness Enumeration (see above) and several OWASP awareness standards (see below) for log entries in WAF-as-a-Service. The Vulnerability mapping is

Vulnerability Mapping

Security Advisory

by Vishal Khandelwal

We are hardening WAF-as-a-Service to protect against two design limitations and associated vulnerabilities, discovered in the previous firmware. When an application is in Block mode, under certain configurations is may be possible to

Newer