Cisco Secure Email Gateway: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Cisco AsyncOS und Cisco Secure Email Gateway ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Mediumbsi:WID-SEC-2026-31562 linked CVEs
Open advisory with all CVEs
More on Gateway
Other advisories
- HighCVE-2025-68211IBM DataPower Gateway: Mehrere Schwachstellen
- MediumCVE-2026-103311Coinbase Commerce Payment Gateway for WooCommerce: unzureichende Prüfung der Datenauthentizität
- Not ratedosv:CVE-2026-112000Vanus 0.8.0 through 0.9.0 Missing Authorization in Gateway Streaming RPCs
- Not ratedosv:CVE-2026-111999Vanus 0.8.0 through 0.9.0 Missing Authentication via Gateway CloudEvents HTTP Receiver
- Not ratedosv:CVE-2026-111998Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway
- Not ratedosv:CVE-2026-111721Open WES through 1.0.0 Broken Access Control via GlobalGatewayFilter Warehouse Scoping
- Mediumbsi:WID-SEC-2026-3998Symantec Web Gateway: Schwachstelle ermöglicht Cross-Site Scripting
- Not ratedosv:CVE-2026-77466Lychee: Webshop payment bypass via unrestricted "Dummy" gateway selection
Other news entries
- Symantec Web Gateway: Schwachstelle ermöglicht Cross-Site ScriptingVulnerabilityBSI CERT-Bund
- NCSC-2026-0431 [1.00] [M/H] Kwetsbaarheden verholpen in IBM DataPower Gateway en onderliggende componentenNewsNCSC-NL
- NCSC-2026-0430 [1.00] [M/H] Kwetsbaarheden verholpen in Juniper Networks Junos OSNewsNCSC-NL
- Cisco Secure Email Gateway: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit AdministratorrechtenVulnerabilityBSI CERT-Bund
- Cisco warns of actively exploited Secure Email Gateway flawNewsCSO Online
- Cisco Warns of Exploited Secure Email Gateway VulnerabilityNewsSecurityWeek
- Vulnérabilité dans Cisco AsyncOS Software pour Secure Email Gateway (15 octobre 2026)NewsCERT-FR (ANSSI)
- NCSC-2026-0429 [1.00] [H/H] Kwetsbaarheid verholpen in Cisco Secure Email GatewayNewsNCSC-NL
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3156
ID