CVE-2025-20393

CVE-2025-20393 📌 개요 CVE-2025-20393 은 Cisco AsyncOS 를 실행하는 Cisco Secure Email Gateway SEG 및 Cisco Secure Email and Web Manager SEWM 어플라이언스에 영향을 미치는 치명적인 원격 명령 실행RCE 취약점입니다. 이 취약점은 Spam Quarantine스팸 격리 기능의 잘못된 입력 검증 으로 인해 발생합니다. 인증되지 않은 원격 공격자 가 조작된 HTTP 요청을 전송하여 이 결함을 악용할 수 있으며, 이로 인해 루트 권한으로 임의 명...

CVE-2026-76461-Detection-Kit-

CVE-2026-76461 — 탐지 및 대응 키트 Cisco Secure Email GatewaySEG용 Cisco AsyncOS의 치명적인 SQL 인젝션 취약점인 CVE-2026-76461 에 대한 탐지, 헌팅, 교정 리소스입니다. ⚠️ 면책 조항 이 저장소에는 방어용 콘텐츠만 포함되어 있습니다: Sigma 규칙, YARA 규칙, 기술 분석, 침해 지표, 교정 지침. 익스플로잇 코드, PoC 또는 무기화된 도구는 포함되어 있지 않습니다. 이 취약점은 CISA의 알려진 악용 취약점KEV 카탈로그에 추가되었습니다. 공개 시점...

cisco-CVE-2023-20075

소개 보안 연구원: ly1g3, ly1g3attuta.io GPG 지문: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 개요: 로컬 권한 상승 및 셸 탈출 CVE: CVE-2023-20075 타임라인: 발견 - ly1g3 보고 - ly1g3 수정 - Cisco Cisco AsyncOS 14.2.0 ESA Cisco Secure Email 권한 상승 - cli에서 root 셸로 cli에 접근 권한이 있는 인증된 사용자는...

cisco-CVE-2023-20009

소개 보안 연구원: ly1g3, ly1g3attuta.io GPG 지문: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 개요: 원격 코드 실행 - 설정 파일로부터의 RCE CVE: CVE-2023-20009 타임라인: 발견 - ly1g3 보고 - ly1g3 수정 - Cisco Cisco AsyncOS 14.2.0 ESA Cisco Secure Email 및 Cisco Secure Email and Web Manager...

Cisco Secure Email Gateway SQLi (cisco-sa-esa-inj-2bLVGmhX)

According to its self-reported version, Cisco Secure Email Gateway is affected by a SQL injection vulnerability. - A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root...

CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

Overview On September 14, 2026, Cisco published a security advisory for CVE-2026-76461, a critical SQL injection vulnerability affecting Cisco AsyncOS Software for Cisco Secure Email Gateway. The vulnerability has a reported CVSS v3.1 base score of 9.8 and could allow an unauthenticated, remote...

The vulnerability of the email analysis mechanism of the Cisco AsyncOS operating system for Cisco Secure Email protection tools allows for the execution of arbitrary commands.

The vulnerability of the email analysis mechanism of Cisco AsyncOS operating system in Cisco Secure Email protection solutions is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with roo...

CVE-2026-76461

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email...

CVE-2026-20353

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76442 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76461

A SQL injection vulnerability in the email parsing logic of Cisco AsyncOS Software for Cisco Secure Email Gateway allows an unauthenticated, remote attacker to send a crafted email containing malicious SQL statements, leading to arbitrary command execution with root privileges on the underlying o...

CVE-2026-76443 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

EUVD-2026-77623

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76441 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

EUVD-2026-77622

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

EUVD-2026-77620

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76441

CVE-2026-76441 affects Cisco Secure Email Gateway and Cisco Secure Email and Web Manager . Cisco's internal security review identified multiple vulnerabilities rooted in improper access control (CWE-284), addressed through software hardening releases . The vulnerability carries a CVSS 3.1 score o...

Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76440: Relative Path Traversal

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76461: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email...