9.8

CVE-2026-20353

Medienbericht

Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20353 are related to issues with improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerCisco
≫
Produkt Cisco Secure Email
Default Statusunknown
Version 14.0.0-698
Status affected
Version 13.5.1-277
Status affected
Version 13.0.0-392
Status affected
Version 14.2.0-620
Status affected
Version 13.0.5-007
Status affected
Version 13.5.4-038
Status affected
Version 14.2.1-020
Status affected
Version 14.3.0-032
Status affected
Version 15.0.0-104
Status affected
Version 15.0.1-030
Status affected
Version 15.5.0-048
Status affected
Version 15.5.1-055
Status affected
Version 15.5.2-018
Status affected
Version 16.0.0-050
Status affected
Version 15.0.3-002
Status affected
Version 16.0.0-054
Status affected
Version 15.5.3-022
Status affected
Version 16.0.1-017
Status affected
Version 15.5.4-012
Status affected
Version 16.0.4-016
Status affected
Version 15.0.5-016
Status affected
Version 16.0.2-112
Status affected
Version 16.0.3-044
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.334
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Cisco PSIRT 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-664 Improper Control of a Resource Through its Lifetime

The product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
17.09.2026 15:48
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
15.09.2026 10:54
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
15.09.2026 09:54
https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm