CVE-2025-34392Critical· 9.8▾ MidnightBarracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlled WSDL that is later loaded by the application. This can lead to arbitrary file write an…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 4.9 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
25%
Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlled WSDL that is later loaded by the application. This can lead to arbitrary file write and remote code execution via webshell upload.
rmm < 2025.1.1Upgrade past the affected range:
rmm 2025.1.1Connected by shared product, vendor, weakness, or advisory.
CVE-2025-34394Critical· 9.8Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service that is insufficiently protected against deserialization of arbitrary types
CVE-2025-34395High· 7.5Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service in which an unauthenticated attacker can invoke a method vulnerable to path traversal to read arbitrary files
CVE-2025-34393Critical· 9.8Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-controlled WSDL service, leading to insecure reflection
CVE-2026-22676High· 7.8Barracuda RMM < 2025.2.2 Privilege Escalation via Insecure Directory Permissions
CVE-2025-67898Medium· 4.5MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files
CVE-2026-83784High· 8.8Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.