CVE-2020-26082: falha de média gravidade em Cisco Secure Email
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.8epss 0.6%
A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass content filters that are configured on an affected device.
The vulnerability is due to improper handling of password-protected zip files. An attacker could exploit this vulnerability by sending a malicious file inside a crafted zip-compressed file to an affected device. A successful exploit could allow the attacker to bypass configured content filters that would normally drop the email.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Produtos afetados
Cisco · Cisco Secure EmailCVEs relacionadas — Cisco Secure Email
No mesmo produto, das mais perigosas para as menos.
CVE-2026-76461CRITICALCisco Secure Email Gateway SQL Injection VulnerabilityEPSS 40.2%KEVCVE-2025-20393CRITICALCisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution VulnerabilityEPSS 32.4%KEVCVE-2026-76519CRITICALCisco Secure Email Gateway Arbitrary File Write VulnerabilityEPSS 6.2%KEVCVE-2026-76443CRITICALCisco Secure Email Gateway Security Hardening ReleaseEPSS 2.4%CVE-2024-20401CRITICALCVE-2024-20401EPSS 2.3%CVE-2023-20009MEDIUMCVE-2023-20009EPSS 2.2%