Barracuda WAF-as-a-Service Updates

waas.barracudanetworks.com

Datapath Firmware 12.2 is Now "Current".

by AppSec PM Team

ANNOUNCEMENT | DATAPATH LIFECYCLE At Barracuda, your security and application performance are our top priorities. To ensure your environment is always equipped with our strongest protection, we continuously evolve our platform. Today, we

React2Shell : CVE-2025-55182 React & Next.js Remote Code Execution Vulnerabilities.

by AppSec PM Team

Last updated: 2025-12-05 CVE-2025-55182 / CVE -2025-66478 Severity: Critical | CVSS Score : 10 Product Impact Statement: Barracuda WAFaaS , as a platform is not affected by these vulnerabilities. Customer Recommendation: We

CVE Database 2025 !

🚀 Your WAFaaS CVE Database updated! Welcome to a New Era of Security Intelligence We’re thrilled to announce a major upgrade to your WAFaaS experience! Our CVE (Common Vulnerabilities and Exposures) database now includes the latest

Security Advisory

by Vishal Khandelwal

We are hardening WAF-as-a-Service to protect against two design limitations and associated vulnerabilities, discovered in the previous firmware. When an application is in Block mode, under certain configurations is may be possible to

Datapath Upgrade to Version 12.1

by Scott Treacy

We are pleased to announce that we will be upgrading the current datapath from version 12.0 to version 12.1 for all WAF-as-a-Service customers who have Let Barracuda manage my datapath version selected within their WAF-as-a-Service account

Shared IP deployments are now live

by Scott Treacy

We are pleased to announce that Shared IP addressing has now been deployed. All new applications will now use a Shared IP address by default. If your account is licenced with a Application Protection Premium plan or your legacy licence

Shared IP deployments are now live

Change to WAF-as-a-Service IP Addresses and Domain Routing

by Nitzan Miron

Starting in 30 days, we will begin migration of many existing WAF-as-a-Service applications to new IP addresses. Some of these IP addresses may be shared between multiple applications.

Change to WAF-as-a-Service IP Addresses and Domain Routing

OpenSSL Upgrade

by Scott Treacy

Per our Datapath policies, we are informing you that we will be upgrading the version of OpenSSL used in Barracuda WAF-as-a-Service to version 3.0 because version 1.1.1 will become End-of-Life on September 11th 2023.

OpenSSL Upgrade

Connectivity Tests

by Scott Treacy

For the version 12.1 datapath, we have deployed an enhanced ability to test connectivity from the WAF-as-a-Service Datapath to the backend application server(s) that you define in the SERVERS page by clicking on a Test Connectivity

Connectivity Tests

Newer