CVE-2026-20353criticalCWE-664

CVE-2026-20353: falha crítica em Cisco Secure Email

Cisco Secure Email Gateway Security Hardening Release

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Cisco Secure Email

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 0.5%
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20353 are related to issues with improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Cisco · Cisco Secure Email
CVEs relacionadas — Cisco Secure Email

No mesmo produto, das mais perigosas para as menos.

CVE-2026-76461CRITICALCisco Secure Email Gateway SQL Injection VulnerabilityEPSS 40.2%KEVCVE-2025-20393CRITICALCisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution VulnerabilityEPSS 32.4%KEVCVE-2026-76519CRITICALCisco Secure Email Gateway Arbitrary File Write VulnerabilityEPSS 6.2%KEVCVE-2026-76443CRITICALCisco Secure Email Gateway Security Hardening ReleaseEPSS 2.4%CVE-2024-20401CRITICALCVE-2024-20401EPSS 2.3%CVE-2023-20009MEDIUMCVE-2023-20009EPSS 2.2%