Product by Cisco
Cisco Secure Email
26 known vulnerabilities in Cisco Secure Email (Cisco), 3 of them actively exploited (CISA KEV).
Key figures
26
Vulnerabilities
3
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-76461 | Cisco Secure Email Gateway SQL Injection Vulnerability In CISA KEValso in 1 other product | 9.8 | |
| Critical | CVE-2025-20393 | Cisco Multiple Products Improper Input Validation Vulnerability In CISA KEValso in 2 other products | 10.0 | |
| Critical | CVE-2026-76519 | Cisco Secure Email Gateway Arbitrary File Write Vulnerability In CISA KEValso in 2 other products | 9.8 | |
| Critical | CVE-2026-76443 | Cisco Secure Email Gateway Security Hardening Release | 9.8 | |
| Critical | CVE-2026-76440 | Cisco Secure Email Gateway Security Hardening Release | 9.8 | |
| Critical | CVE-2026-20353 | Cisco Secure Email Gateway Security Hardening Release | 9.8 | |
| High | CVE-2023-20009 | Cisco Secure Email: Improper Input Validation | 6.5 | |
| High | CVE-2026-76442 | Cisco Secure Email Gateway Security Hardening Release | 7.5 | |
| High | CVE-2025-20184 | Cisco Secure Email and Web Manager and Secure Web Appliance Command Injection Vulnerability | 6.5 | |
| High | CVE-2022-20960 | Cisco Secure Email: Uncontrolled Resource Consumption | 7.5 | |
| Medium | CVE-2022-20942 | Cisco Secure Web Appliance: Exposure of Private Personal Information to an Unauthorized Actor | 6.5 | |
| Medium | CVE-2023-20075 | Cisco Secure Email: Command Injection | 6.0 | |
| High | CVE-2024-20429 | Cisco Secure Email: Injection | 6.5 | |
| Medium | CVE-2026-20355 | Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty | 5.9 | |
| Medium | CVE-2026-20354 | Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty | 5.9 | |
| Medium | CVE-2022-20867 | Cisco Secure Email: SQL Injection | 5.4 | |
| High | CVE-2022-20868 | Cisco Secure Web Appliance: Use of Hard-coded Cryptographic Key | 4.7 | |
| Medium | CVE-2024-20392 | Cisco Secure Email: HTTP Request/Response Splitting | 6.1 | |
| Medium | CVE-2022-20772 | Cisco Secure Email: HTTP Request/Response Splitting | 4.7 | |
| Medium | CVE-2025-20153 | Cisco ESA mail Bypass | 5.8 | |
| Medium | CVE-2024-20258 | Cisco Secure Email: Cross-site Scripting | 6.1 | |
| Medium | CVE-2024-20504 | Cisco Secure Email: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) | 5.4 | |
| Medium | CVE-2025-20180 | Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability | 4.8 | |
| Medium | CVE-2025-20207 | Cisco Secure Email: Exposure of Sensitive Information to an Unauthorized Actor | 4.3 | |
| Medium | CVE-2024-20257 | Cisco Secure Email: Cross-site Scripting | 4.8 |
News
- Cisco warns of actively exploited Secure Email Gateway flawcsoonline,
- Vulnérabilité dans Cisco AsyncOS Software pour Secure Email Gateway (15 octobre 2026)cert-fr,
- Critical Cisco Secure Email Gateway zero-day gives attackers root accesscsoonline,
- Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Executionthehackernews,
- Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitationsecurityweek,
- Multiples vulnérabilités dans les produits Cisco (15 septembre 2026)cert-fr,