{"schema":"vulnpedia.research/1","cve":"CVE-2023-2868","references":[{"url":"https://www.barracuda.com/company/legal/esg-vulnerability","tags":["x_transferred","Mitigation","Vendor Advisory"],"source":"mitre","sourceId":"Google","modified":"2023-05-24T18:00:52.360Z","origins":[{"source":"mitre","sourceId":"Google","modified":"2023-05-24T18:00:52.360Z","url":"https://www.barracuda.com/company/legal/esg-vulnerability"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-02T06:33:06.053Z","url":"https://www.barracuda.com/company/legal/esg-vulnerability"},{"source":"nvd","sourceId":"CVE-2023-2868","modified":"2026-06-17T05:53:39.770","url":"https://www.barracuda.com/company/legal/esg-vulnerability"}]},{"url":"https://status.barracuda.com/incidents/34kx82j5n4q9","tags":["x_transferred","Vendor Advisory","KEV report"],"source":"mitre","sourceId":"Google","modified":"2023-05-24T18:00:52.360Z","origins":[{"source":"mitre","sourceId":"Google","modified":"2023-05-24T18:00:52.360Z","url":"https://status.barracuda.com/incidents/34kx82j5n4q9"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-02T06:33:06.053Z","url":"https://status.barracuda.com/incidents/34kx82j5n4q9"},{"source":"nvd","sourceId":"CVE-2023-2868","modified":"2026-06-17T05:53:39.770","url":"https://status.barracuda.com/incidents/34kx82j5n4q9"},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://status.barracuda.com/incidents/34kx82j5n4q9"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-2868","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2025-10-21T23:05:47.195Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2025-10-21T23:05:47.195Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-2868"},{"source":"nvd","sourceId":"CVE-2023-2868","modified":"2026-06-17T05:53:39.770","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-2868"}]},{"source":"euvd","sourceId":"EUVD-2023-34316","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-34316","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2023-34316","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-34316"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://cisa.gov/news-events/alerts/2023/06/15/barracuda-networks-releases-update-address-esg-vulnerability","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://cisa.gov/news-events/alerts/2023/06/15/barracuda-networks-releases-update-address-esg-vulnerability"}]},{"url":"https://cloud.google.com/blog/topics/threat-intelligence/barracuda-esg-exploited-globally","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://cloud.google.com/blog/topics/threat-intelligence/barracuda-esg-exploited-globally"}]},{"url":"https://www.mandiant.com/resources/blog/barracuda-esg-exploited-globally","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://www.mandiant.com/resources/blog/barracuda-esg-exploited-globally"}]},{"url":"https://cybergeeks.tech/a-technical-analysis-of-the-saltwater-backdoor-used-in-barracuda-0-day-vulnerability-cve-2023-2868-exploitation/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://cybergeeks.tech/a-technical-analysis-of-the-saltwater-backdoor-used-in-barracuda-0-day-vulnerability-cve-2023-2868-exploitation/"}]},{"url":"https://www.mandiant.com/resources/blog/chinese-espionage-tactics","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://www.mandiant.com/resources/blog/chinese-espionage-tactics"}]},{"url":"https://cisa.gov/news-events/alerts/2023/07/28/cisa-releases-malware-analysis-reports-barracuda-backdoors","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://cisa.gov/news-events/alerts/2023/07/28/cisa-releases-malware-analysis-reports-barracuda-backdoors"}]},{"url":"https://www.cisa.gov/news-events/analysis-reports/ar23-209a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://www.cisa.gov/news-events/analysis-reports/ar23-209a"}]},{"url":"https://www.cisa.gov/news-events/analysis-reports/ar23-209b","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://www.cisa.gov/news-events/analysis-reports/ar23-209b"}]},{"url":"https://www.cisa.gov/news-events/analysis-reports/ar23-209c","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://www.cisa.gov/news-events/analysis-reports/ar23-209c"}]},{"url":"https://cisa.gov/news-events/analysis-reports/ar23-221a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://cisa.gov/news-events/analysis-reports/ar23-221a"}]},{"url":"https://www.darkreading.com/threat-intelligence/cisa-whirlpool-backdoor-barracuda-esg-security","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://www.darkreading.com/threat-intelligence/cisa-whirlpool-backdoor-barracuda-esg-security"}]},{"url":"https://information.rapid7.com/rs/411-NAK-970/images/Rapid7-2023-Mid-Year-Threat-Review.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://information.rapid7.com/rs/411-NAK-970/images/Rapid7-2023-Mid-Year-Threat-Review.pdf"}]},{"url":"https://cisa.gov/news-events/analysis-reports/ar23-230a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://cisa.gov/news-events/analysis-reports/ar23-230a"}]},{"url":"https://www.ic3.gov/Media/News/2023/230823.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://www.ic3.gov/Media/News/2023/230823.pdf"}]},{"url":"https://cisa.gov/news-events/alerts/2023/08/29/cisa-releases-iocs-associated-malicious-barracuda-activity","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://cisa.gov/news-events/alerts/2023/08/29/cisa-releases-iocs-associated-malicious-barracuda-activity"}]},{"url":"https://cloud.google.com/blog/topics/threat-intelligence/unc4841-post-barracuda-zero-day-remediation","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://cloud.google.com/blog/topics/threat-intelligence/unc4841-post-barracuda-zero-day-remediation"}]},{"url":"https://www.mandiant.com/resources/blog/unc4841-post-barracuda-zero-day-remediation","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://www.mandiant.com/resources/blog/unc4841-post-barracuda-zero-day-remediation"}]},{"url":"https://www.cisa.gov/news-events/analysis-reports/ar23-250a-0","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://www.cisa.gov/news-events/analysis-reports/ar23-250a-0"}]},{"url":"https://go.recordedfuture.com/hubfs/reports/cta-2023-1107.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://go.recordedfuture.com/hubfs/reports/cta-2023-1107.pdf"}]},{"url":"https://www.trellix.com/advanced-research-center/threat-reports/november-2023/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://www.trellix.com/advanced-research-center/threat-reports/november-2023/"}]},{"url":"https://www.sentinelone.com/resources/watchtower-end-of-year-report-2023/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://www.sentinelone.com/resources/watchtower-end-of-year-report-2023/"}]},{"url":"https://ti.qianxin.com/uploads/2024/02/02/dcc93e586f9028c68e7ab34c3326ff31.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://ti.qianxin.com/uploads/2024/02/02/dcc93e586f9028c68e7ab34c3326ff31.pdf"}]},{"url":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2024-CTI-002.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2024-CTI-002.pdf"}]},{"url":"https://engage.cognyte.com/s/9829b9f8/?page=1","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://engage.cognyte.com/s/9829b9f8/?page=1"}]},{"url":"https://go.recordedfuture.com/hubfs/reports/ta-2024-0321.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://go.recordedfuture.com/hubfs/reports/ta-2024-0321.pdf"}]},{"url":"https://cloud.google.com/blog/topics/threat-intelligence/2023-zero-day-trends","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://cloud.google.com/blog/topics/threat-intelligence/2023-zero-day-trends"}]},{"url":"https://storage.googleapis.com/gweb-uniblog-publish-prod/documents/Year_in_Review_of_ZeroDays.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://storage.googleapis.com/gweb-uniblog-publish-prod/documents/Year_in_Review_of_ZeroDays.pdf"}]},{"url":"https://bi.zone/upload/for_download/Threat_Zone_2024_BI.ZONE_Research_rus.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://bi.zone/upload/for_download/Threat_Zone_2024_BI.ZONE_Research_rus.pdf"}]},{"url":"https://4793768.fs1.hubspotusercontent-na1.net/hubfs/4793768/CyberCX_Report_DFIR%202023%20Year%20in%20Review_Online.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://4793768.fs1.hubspotusercontent-na1.net/hubfs/4793768/CyberCX_Report_DFIR%202023%20Year%20in%20Review_Online.pdf"}]},{"url":"https://services.google.com/fh/files/misc/m-trends-2024.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://services.google.com/fh/files/misc/m-trends-2024.pdf"}]},{"url":"https://www.verizon.com/business/resources/T600/reports/2024-dbir-data-breach-investigations-report.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://www.verizon.com/business/resources/T600/reports/2024-dbir-data-breach-investigations-report.pdf"}]},{"url":"https://www.rapid7.com/globalassets/_pdfs/research/rapid7_2024_attack_intelligence_report.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://www.rapid7.com/globalassets/_pdfs/research/rapid7_2024_attack_intelligence_report.pdf"}]},{"url":"https://labs.withsecure.com/publications/mass-exploitation-the-vulnerable-edge-of-enterprise-security","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://labs.withsecure.com/publications/mass-exploitation-the-vulnerable-edge-of-enterprise-security"}]},{"url":"https://www.cisa.gov/sites/default/files/2024-07/aa24-207a-dprk-cyber-group-conducts-global-espionage-campaign.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/2024-07/aa24-207a-dprk-cyber-group-conducts-global-espionage-campaign.pdf"}]},{"url":"https://redalert.nshc.net/2024/07/29/2023-activities-summary-of-sectorb-groups-jpn/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://redalert.nshc.net/2024/07/29/2023-activities-summary-of-sectorb-groups-jpn/"}]},{"url":"https://www.cisa.gov/sites/default/files/2024-11/aa24-317a-2023-top-routinely-exploited-vulnerabilities.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/2024-11/aa24-317a-2023-top-routinely-exploited-vulnerabilities.pdf"}]},{"url":"https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/2023-top-routinely-exploited-vulnerabilities","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/2023-top-routinely-exploited-vulnerabilities"}]},{"url":"https://intel471.com/blog/a-look-at-trending-chinese-apt-techniques","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://intel471.com/blog/a-look-at-trending-chinese-apt-techniques"}]},{"url":"https://eclypsium.com/blog/infographic-a-history-of-network-device-threats-and-what-lies-ahead/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://eclypsium.com/blog/infographic-a-history-of-network-device-threats-and-what-lies-ahead/"}]},{"url":"https://ics-cert.kaspersky.com/media/Kaspersky-ICS-CERT-APT-and-financial-attacks-on-industrial-organizations-in-Q1-2025-En.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://ics-cert.kaspersky.com/media/Kaspersky-ICS-CERT-APT-and-financial-attacks-on-industrial-organizations-in-Q1-2025-En.pdf"}]},{"url":"https://cdn.prod.website-files.com/626ff19cdd07d1258d49238d/699db1ba8d377a68f7d697b7_Threat%20Report%202026%20v4.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://cdn.prod.website-files.com/626ff19cdd07d1258d49238d/699db1ba8d377a68f7d697b7_Threat%20Report%202026%20v4.pdf"}]},{"url":"https://theravenfile.com/2026/08/03/crpx0-scammer-turned-ransomware-operator/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://theravenfile.com/2026/08/03/crpx0-scammer-turned-ransomware-operator/"}]},{"url":"https://vulncheck.com/xdb/eb964d29bc36","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"eb964d29bc36","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"eb964d29bc36","modified":"2023-05-18T00:00:00Z","url":"https://vulncheck.com/xdb/eb964d29bc36"}]},{"url":"https://github.com/cfielding-r7/poc-cve-2023-2868","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"eb964d29bc36","modified":"2023-05-18T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"eb964d29bc36","modified":"2023-05-18T00:00:00Z","url":"https://github.com/cfielding-r7/poc-cve-2023-2868"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/cfielding-r7/poc-cve-2023-2868","source":"poc-in-github","sourceId":"CVE-2023-2868","modified":"2026-07-10T04:34:05Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-2868","url":"https://github.com/cfielding-r7/poc-cve-2023-2868"},{"source":"poc-in-github","sourceId":"CVE-2023-2868","modified":"2026-07-10T04:34:05Z","url":"https://github.com/cfielding-r7/poc-cve-2023-2868"}],"tags":[]},{"url":"https://github.com/cashapp323232/CVE-2023-2868CVE-2023-2868","source":"poc-in-github","sourceId":"CVE-2023-2868","modified":"2023-07-30T16:42:27Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-2868","url":"https://github.com/cashapp323232/CVE-2023-2868CVE-2023-2868"},{"source":"poc-in-github","sourceId":"CVE-2023-2868","modified":"2023-07-30T16:42:27Z","url":"https://github.com/cashapp323232/CVE-2023-2868CVE-2023-2868"}],"tags":[]},{"url":"https://github.com/krmxd/CVE-2023-2868","source":"poc-in-github","sourceId":"CVE-2023-2868","modified":"2023-08-25T13:07:51Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-2868","url":"https://github.com/krmxd/CVE-2023-2868"},{"source":"poc-in-github","sourceId":"CVE-2023-2868","modified":"2023-08-25T13:07:51Z","url":"https://github.com/krmxd/CVE-2023-2868"}],"tags":[]}],"cataloguedPoc":[{"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/smtp/barracuda_esg_tarfile_rce.rb","source":"metasploit","sourceId":"exploit/linux/smtp/barracuda_esg_tarfile_rce","description":"Barracuda ESG TAR Filename Command Injection","modified":"2026-04-02 17:30:43 +0000","kind":"metasploit","verification":"catalogued","origins":[{"source":"metasploit","sourceId":"exploit/linux/smtp/barracuda_esg_tarfile_rce","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/smtp/barracuda_esg_tarfile_rce.rb"},{"source":"metasploit","sourceId":"exploit/linux/smtp/barracuda_esg_tarfile_rce","modified":"2026-04-02 17:30:43 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/smtp/barracuda_esg_tarfile_rce.rb"}],"tags":[]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"eb964d29bc36","url":"https://vulncheck.com/xdb/eb964d29bc36","cve":"CVE-2023-2868","dateAdded":"2023-12-20T23:19:06Z","modified":"2023-05-18T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/cfielding-r7/poc-cve-2023-2868","observations":[{"dateAdded":"2023-12-20T23:19:06Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"eb964d29bc36","modified":"2023-05-18T00:00:00Z","url":"https://vulncheck.com/xdb/eb964d29bc36"}]}],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2023-05-18T00:00:00Z","modified":"2023-05-18T00:00:00Z","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Barracuda Networks","product":"Email Security Gateway (ESG) Appliance","dueDate":"2023-06-16T00:00:00Z","cisaDateAdded":"2023-05-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","modified":"2023-05-18T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit","dateAdded":"2023-05-18T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://status.barracuda.com/incidents/34kx82j5n4q9","dateAdded":"2023-05-19T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://status.barracuda.com/incidents/34kx82j5n4q9"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","dateAdded":"2023-05-26T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://cisa.gov/news-events/alerts/2023/06/15/barracuda-networks-releases-update-address-esg-vulnerability","dateAdded":"2023-06-15T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://cisa.gov/news-events/alerts/2023/06/15/barracuda-networks-releases-update-address-esg-vulnerability"},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://cloud.google.com/blog/topics/threat-intelligence/barracuda-esg-exploited-globally"},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://www.mandiant.com/resources/blog/barracuda-esg-exploited-globally"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://cybergeeks.tech/a-technical-analysis-of-the-saltwater-backdoor-used-in-barracuda-0-day-vulnerability-cve-2023-2868-exploitation/","dateAdded":"2023-06-26T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://cybergeeks.tech/a-technical-analysis-of-the-saltwater-backdoor-used-in-barracuda-0-day-vulnerability-cve-2023-2868-exploitation/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://www.mandiant.com/resources/blog/chinese-espionage-tactics","dateAdded":"2023-07-18T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://www.mandiant.com/resources/blog/chinese-espionage-tactics"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://cisa.gov/news-events/alerts/2023/07/28/cisa-releases-malware-analysis-reports-barracuda-backdoors","dateAdded":"2023-07-28T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://cisa.gov/news-events/alerts/2023/07/28/cisa-releases-malware-analysis-reports-barracuda-backdoors"},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://www.cisa.gov/news-events/analysis-reports/ar23-209a"},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://www.cisa.gov/news-events/analysis-reports/ar23-209b"},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://www.cisa.gov/news-events/analysis-reports/ar23-209c"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://cisa.gov/news-events/analysis-reports/ar23-221a","dateAdded":"2023-08-09T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://cisa.gov/news-events/analysis-reports/ar23-221a"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://www.darkreading.com/threat-intelligence/cisa-whirlpool-backdoor-barracuda-esg-security","dateAdded":"2023-08-10T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://www.darkreading.com/threat-intelligence/cisa-whirlpool-backdoor-barracuda-esg-security"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://information.rapid7.com/rs/411-NAK-970/images/Rapid7-2023-Mid-Year-Threat-Review.pdf","dateAdded":"2023-08-17T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://information.rapid7.com/rs/411-NAK-970/images/Rapid7-2023-Mid-Year-Threat-Review.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://cisa.gov/news-events/analysis-reports/ar23-230a","dateAdded":"2023-08-18T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://cisa.gov/news-events/analysis-reports/ar23-230a"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://www.ic3.gov/Media/News/2023/230823.pdf","dateAdded":"2023-08-23T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://www.ic3.gov/Media/News/2023/230823.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://cisa.gov/news-events/alerts/2023/08/29/cisa-releases-iocs-associated-malicious-barracuda-activity","dateAdded":"2023-08-29T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://cisa.gov/news-events/alerts/2023/08/29/cisa-releases-iocs-associated-malicious-barracuda-activity"},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://cloud.google.com/blog/topics/threat-intelligence/unc4841-post-barracuda-zero-day-remediation"},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://www.mandiant.com/resources/blog/unc4841-post-barracuda-zero-day-remediation"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/news-events/analysis-reports/ar23-250a-0","dateAdded":"2023-09-07T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://www.cisa.gov/news-events/analysis-reports/ar23-250a-0"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://go.recordedfuture.com/hubfs/reports/cta-2023-1107.pdf","dateAdded":"2023-11-07T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://go.recordedfuture.com/hubfs/reports/cta-2023-1107.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://www.trellix.com/advanced-research-center/threat-reports/november-2023/","dateAdded":"2023-11-15T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://www.trellix.com/advanced-research-center/threat-reports/november-2023/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://www.sentinelone.com/resources/watchtower-end-of-year-report-2023/","dateAdded":"2024-01-31T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://www.sentinelone.com/resources/watchtower-end-of-year-report-2023/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://ti.qianxin.com/uploads/2024/02/02/dcc93e586f9028c68e7ab34c3326ff31.pdf","dateAdded":"2024-02-02T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://ti.qianxin.com/uploads/2024/02/02/dcc93e586f9028c68e7ab34c3326ff31.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2024-CTI-002.pdf","dateAdded":"2024-02-27T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://www.cert.ssi.gouv.fr/uploads/CERTFR-2024-CTI-002.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://engage.cognyte.com/s/9829b9f8/?page=1","dateAdded":"2024-03-17T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://engage.cognyte.com/s/9829b9f8/?page=1"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://go.recordedfuture.com/hubfs/reports/ta-2024-0321.pdf","dateAdded":"2024-03-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://go.recordedfuture.com/hubfs/reports/ta-2024-0321.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://cloud.google.com/blog/topics/threat-intelligence/2023-zero-day-trends","dateAdded":"2024-03-27T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://cloud.google.com/blog/topics/threat-intelligence/2023-zero-day-trends"},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://storage.googleapis.com/gweb-uniblog-publish-prod/documents/Year_in_Review_of_ZeroDays.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://bi.zone/upload/for_download/Threat_Zone_2024_BI.ZONE_Research_rus.pdf","dateAdded":"2024-04-04T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://bi.zone/upload/for_download/Threat_Zone_2024_BI.ZONE_Research_rus.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://4793768.fs1.hubspotusercontent-na1.net/hubfs/4793768/CyberCX_Report_DFIR%202023%20Year%20in%20Review_Online.pdf","dateAdded":"2024-04-12T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://4793768.fs1.hubspotusercontent-na1.net/hubfs/4793768/CyberCX_Report_DFIR%202023%20Year%20in%20Review_Online.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://services.google.com/fh/files/misc/m-trends-2024.pdf","dateAdded":"2024-04-23T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://services.google.com/fh/files/misc/m-trends-2024.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://www.verizon.com/business/resources/T600/reports/2024-dbir-data-breach-investigations-report.pdf","dateAdded":"2024-05-01T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://www.verizon.com/business/resources/T600/reports/2024-dbir-data-breach-investigations-report.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://www.rapid7.com/globalassets/_pdfs/research/rapid7_2024_attack_intelligence_report.pdf","dateAdded":"2024-05-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://www.rapid7.com/globalassets/_pdfs/research/rapid7_2024_attack_intelligence_report.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://labs.withsecure.com/publications/mass-exploitation-the-vulnerable-edge-of-enterprise-security","dateAdded":"2024-06-12T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://labs.withsecure.com/publications/mass-exploitation-the-vulnerable-edge-of-enterprise-security"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/2024-07/aa24-207a-dprk-cyber-group-conducts-global-espionage-campaign.pdf","dateAdded":"2024-07-25T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://www.cisa.gov/sites/default/files/2024-07/aa24-207a-dprk-cyber-group-conducts-global-espionage-campaign.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://redalert.nshc.net/2024/07/29/2023-activities-summary-of-sectorb-groups-jpn/","dateAdded":"2024-07-29T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://redalert.nshc.net/2024/07/29/2023-activities-summary-of-sectorb-groups-jpn/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/2024-11/aa24-317a-2023-top-routinely-exploited-vulnerabilities.pdf","dateAdded":"2024-11-12T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://www.cisa.gov/sites/default/files/2024-11/aa24-317a-2023-top-routinely-exploited-vulnerabilities.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/2023-top-routinely-exploited-vulnerabilities","dateAdded":"2024-11-13T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/2023-top-routinely-exploited-vulnerabilities"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://intel471.com/blog/a-look-at-trending-chinese-apt-techniques","dateAdded":"2024-11-18T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://intel471.com/blog/a-look-at-trending-chinese-apt-techniques"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://eclypsium.com/blog/infographic-a-history-of-network-device-threats-and-what-lies-ahead/","dateAdded":"2024-12-02T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://eclypsium.com/blog/infographic-a-history-of-network-device-threats-and-what-lies-ahead/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://ics-cert.kaspersky.com/media/Kaspersky-ICS-CERT-APT-and-financial-attacks-on-industrial-organizations-in-Q1-2025-En.pdf","dateAdded":"2025-06-19T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://ics-cert.kaspersky.com/media/Kaspersky-ICS-CERT-APT-and-financial-attacks-on-industrial-organizations-in-Q1-2025-En.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://cdn.prod.website-files.com/626ff19cdd07d1258d49238d/699db1ba8d377a68f7d697b7_Threat%20Report%202026%20v4.pdf","dateAdded":"2026-02-26T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://cdn.prod.website-files.com/626ff19cdd07d1258d49238d/699db1ba8d377a68f7d697b7_Threat%20Report%202026%20v4.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","catalog":"VulnCheck KEV","kind":"report","url":"https://theravenfile.com/2026/08/03/crpx0-scammer-turned-ransomware-operator/","dateAdded":"2026-08-03T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-2868","url":"https://theravenfile.com/2026/08/03/crpx0-scammer-turned-ransomware-operator/"}]}]}