9.8

CVE-2026-76440

Medienbericht

Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-76440 are related to path traversal issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-23.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerCisco
≫
Produkt Cisco Secure Email
Default Statusunknown
Version 14.0.0-698
Status affected
Version 13.5.1-277
Status affected
Version 13.0.0-392
Status affected
Version 14.2.0-620
Status affected
Version 13.0.5-007
Status affected
Version 13.5.4-038
Status affected
Version 14.2.1-020
Status affected
Version 14.3.0-032
Status affected
Version 15.0.0-104
Status affected
Version 15.0.1-030
Status affected
Version 15.5.0-048
Status affected
Version 15.5.1-055
Status affected
Version 15.5.2-018
Status affected
Version 16.0.0-050
Status affected
Version 15.0.3-002
Status affected
Version 16.0.0-054
Status affected
Version 15.5.3-022
Status affected
Version 16.0.1-017
Status affected
Version 15.5.4-012
Status affected
Version 16.0.4-016
Status affected
Version 15.0.5-016
Status affected
Version 16.0.2-112
Status affected
Version 16.0.3-044
Status affected
Version 15.5.5-014
Status affected
HerstellerCisco
≫
Produkt Cisco Secure Email and Web Manager
Default Statusunknown
Version 13.6.2-023
Status affected
Version 13.6.2-078
Status affected
Version 13.0.0-249
Status affected
Version 13.0.0-277
Status affected
Version 13.8.1-052
Status affected
Version 13.8.1-068
Status affected
Version 13.8.1-074
Status affected
Version 14.0.0-404
Status affected
Version 12.8.1-002
Status affected
Version 14.1.0-227
Status affected
Version 13.6.1-201
Status affected
Version 14.2.0-203
Status affected
Version 14.2.0-212
Status affected
Version 12.8.1-021
Status affected
Version 13.8.1-108
Status affected
Version 14.2.0-224
Status affected
Version 14.3.0-120
Status affected
Version 15.0.0-334
Status affected
Version 15.5.1-024
Status affected
Version 15.5.1-029
Status affected
Version 15.5.2-005
Status affected
Version 16.0.0-195
Status affected
Version 15.5.3-017
Status affected
Version 16.0.1-010
Status affected
Version 15.0.1-035
Status affected
Version 16.0.2-088
Status affected
Version 15.5.4-007
Status affected
Version 15.0.2-007
Status affected
Version 16.0.4-010
Status affected
Version 16.0.3-016
Status affected
Version 16.5.0-429
Status affected
Version 15.5.5-006
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.45% 0.385
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Cisco PSIRT 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-23 Relative Path Traversal

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
17.09.2026 15:48
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
15.09.2026 10:54
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
15.09.2026 09:54
https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm