9.8

CVE-2026-76441

Medienbericht

Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-76441 are related to issues with improper access control that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerCisco
≫
Produkt Cisco Secure Email and Web Manager
Default Statusunknown
Version 13.6.2-023
Status affected
Version 13.6.2-078
Status affected
Version 13.0.0-249
Status affected
Version 13.0.0-277
Status affected
Version 13.8.1-052
Status affected
Version 13.8.1-068
Status affected
Version 13.8.1-074
Status affected
Version 14.0.0-404
Status affected
Version 12.8.1-002
Status affected
Version 14.1.0-227
Status affected
Version 13.6.1-201
Status affected
Version 14.2.0-203
Status affected
Version 14.2.0-212
Status affected
Version 12.8.1-021
Status affected
Version 13.8.1-108
Status affected
Version 14.2.0-224
Status affected
Version 14.3.0-120
Status affected
Version 15.0.0-334
Status affected
Version 15.5.1-024
Status affected
Version 15.5.1-029
Status affected
Version 15.5.2-005
Status affected
Version 16.0.0-195
Status affected
Version 15.5.3-017
Status affected
Version 16.0.1-010
Status affected
Version 15.0.1-035
Status affected
Version 16.0.2-088
Status affected
Version 15.5.4-007
Status affected
Version 15.0.2-007
Status affected
Version 16.0.4-010
Status affected
Version 16.0.3-016
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.412
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Cisco PSIRT 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
17.09.2026 15:48
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
15.09.2026 10:54
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
15.09.2026 09:54
https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm