EIP-2026-101177

PRE-CVE

Barracuda Web Application Firewall 660 - '/cgi-mod/index.cgi' Multiple HTML Injection Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-101177. PoCs published by Global-Evolution.

AI-analyzed exploit summary This exploit demonstrates an HTML injection vulnerability in Barracuda Web Application Firewall 660. The PoC URL injects iframe tags into vulnerable parameters, potentially leading to XSS attacks.

Description

Barracuda Web Application Firewall 660 - '/cgi-mod/index.cgi' Multiple HTML Injection Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED
by Global-Evolution · textremotehardware
https://www.exploit-db.com/exploits/33423

This exploit demonstrates an HTML injection vulnerability in Barracuda Web Application Firewall 660. The PoC URL injects iframe tags into vulnerable parameters, potentially leading to XSS attacks.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: Barracuda Web Application Firewall 660 firmware 7.3.1.007
No auth needed
Prerequisites: Network access to the target · Vulnerable firmware version
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026