https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-34395.htmlhttps://patchthecve.com/cve/CVE-2025-34395.htmlWed, 14 Oct 2026 21:10:00 +0000HIGH 7.5: Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service in which an unauthenticated attacker can invoke a method vulnerable to path traversal to read arbitrary files. This vulnerability can be escalated to remote code execution by https://patchthecve.com/cve/CVE-2025-34394.htmlhttps://patchthecve.com/cve/CVE-2025-34394.htmlWed, 14 Oct 2026 21:10:00 +0000CRITICAL 9.8: Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service that is insufficiently protected against deserialization of arbitrary types. This can lead to remote code execution.https://patchthecve.com/cve/CVE-2025-34393.htmlhttps://patchthecve.com/cve/CVE-2025-34393.htmlWed, 14 Oct 2026 21:10:00 +0000CRITICAL 9.8: Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not correctly verify the name of an attacker-controlled WSDL service, leading to insecure reflection. This can result in remote code execution through either invocation of arbitrary methods or deserialihttps://patchthecve.com/cve/CVE-2025-34392.htmlhttps://patchthecve.com/cve/CVE-2025-34392.htmlWed, 14 Oct 2026 21:10:00 +0000CRITICAL 9.8: Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, does not verify the URL defined in an attacker-controlled WSDL that is later loaded by the application. This can lead to arbitrary file write and remote code execution via webshell upload.