What’s Vulnerable › Vulnerabilities

CVE-2026-22676: Barracuda RMM < 2025.2.2 Privilege Escalation via Insecure Directory Permissions

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-15 · updated 2026-10-26
• Weakness: CWE-732

Description

Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly permissive filesystem ACLs on the C:\Windows\Automation directory. Attackers can modify existing automation content or place attacker-controlled files in this directory, which are then executed under the NT AUTHORITY\SYSTEM account during routine automation cycles, typically succeeding within the next execution cycle.

Affected products

• Barracuda Networks RMM: before 2025.2.2 — fixed in 2025.2.2

How to fix

Upgrade to a fixed version: Barracuda Networks RMM 2025.2.2. Check the vendor advisory for mitigations.

References

• https://download.mw-rmm.barracudamsp.com/PDF/2025.2.2/RN_BRMM_2025.2.2_EN.pdf
• https://www.vulncheck.com/advisories/barracuda-rmm-privilege-escalation-via-insecure-directory-permissions

Get alerted when CVE-2026-22676 or the next vulnerability affects your stack