CVE-2026-76443criticalCWE-707

CVE-2026-76443: fallo crítico en Cisco Secure Email

Cisco Secure Email Gateway Security Hardening Release

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Cisco Secure Email+ Monitorear Cisco Secure Email and Web Manager

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

43Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendcvss 9.8epss 2.4%
de la publicación al armael mismo día
Publicada en NVD14 sept
metasploit14 sept
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76443 are related to issues with improper neutralization that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-707.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Cisco · Cisco Secure EmailCisco · Cisco Secure Email and Web Manager
CVEs relacionadas — Cisco Secure Email

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-76461CRITICALCisco Secure Email Gateway SQL Injection VulnerabilityEPSS 40.2%KEVCVE-2025-20393CRITICALCisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution VulnerabilityEPSS 32.4%KEVCVE-2026-76519CRITICALCisco Secure Email Gateway Arbitrary File Write VulnerabilityEPSS 6.2%KEVCVE-2024-20401CRITICALCVE-2024-20401EPSS 2.3%CVE-2023-20009MEDIUMCVE-2023-20009EPSS 2.2%CVE-2022-20942MEDIUMCVE-2022-20942EPSS 1.1%