India, Aug. 26 -- The average web application contains 20 security vulnerabilities that could be exploited to steal data, compromise accounts or gain unauthorised access to systems, according to new research from Barracuda.

The findings, based on hundreds of Barracuda Application Security Insight scans conducted over five months in 2026, suggest that many of the weaknesses are linked to preventable security misconfigurations and oversights.

The research identified seven vulnerability categories that together accounted for about 90% of all flaws detected.

Information disclosure was the most common category, accounting for 25% of detected vulnerabilities. These weaknesses can cause applications to reveal information about systems, domain...