CVE-2023-26213

Barracuda CloudGen WAN Private Edge Gateway devices prior to version 8 (specifically before 8 webui-sdwan-1089-8.3.1-174141891) are affected by an OS command injection in /ajax/update_certificate. An authenticated attacker can craft a request (e.g., using shell metacharacters in name/password fie...