CVE-2026-76440 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-20353

CVE-2026-20353 affects Cisco Secure Email Gateway and Cisco Secure Email and Web Manager . The vulnerability stems from improper control of a resource through its lifetime (CWE-664) , identified during an internal security review. Cisco assigned a CVSS 3.1 score of 9.8 (Critical) with a network-b...

CVE-2026-76441 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76441 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-20353 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76441

CVE-2026-76441 affects Cisco Secure Email Gateway and Cisco Secure Email and Web Manager . Cisco's internal security review identified multiple vulnerabilities rooted in improper access control (CWE-284), addressed through software hardening releases . The vulnerability carries a CVSS 3.1 score o...

EUVD-2026-77622

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

Security Bulletin: IBM DataPower Gateway affected by use after free in Grub (CVE-2025-61662)

Summary IBM DataPower Gateway has addressed CVE-2025-61662 in version 11.0.0.2 Vulnerability Details CVEID:CVE-2025-61662 DESCRIPTION: A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remains registered...

Astra Linux – Vulnerability in jq

jq is a command-line JSON processor. A integer overflow vulnerability exists in versions 1.8.1 and later, within the jvpstring.Append and jvpstringCopyReplaceBad functions. Concatenating strings whose combined length exceeds 2^31 bytes causes a 32-bit unsigned integer overflow in the buffer...

PT-2026-91264

Name of the Vulnerable Software and Affected Versions Cisco Secure Email Gateway affected versions not specified Cisco Secure Email and Web Manager affected versions not specified Description Cisco Secure Email Gateway and Cisco Secure Email and Web Manager contain multiple issues related to...

CVE-2026-20353: Improper Control of a Resource Through its Lifetime

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

PT-2026-91267

Name of the Vulnerable Software and Affected Versions Cisco Secure Email Gateway versions 15.5 and earlier Cisco Secure Email and Web Manager versions 15.5 and earlier Description Multiple issues related to improper access control were identified during an internal security review. These issues...

Evaluating the NIST Bugs Framework against CWE As a Successor for Automated Vulnerability Classification

Vulnerability classification based on root cause weaknesses is essential for numerous cybersecurity activities, where the Common Weakness Enumeration CWE serves as a public repository of such flaws. However, its overlapping entries create a non-orthogonal structure. The result is the same...

PT-2026-91268

Name of the Vulnerable Software and Affected Versions Cisco Secure Email Gateway affected versions not specified Cisco Secure Email and Web Manager affected versions not specified Description Issues exist due to improper validation of specified quantity in input, which can lead to a remote denial...

CVE-2026-76442: Improper Validation of Specified Quantity in Input

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76440: Relative Path Traversal

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-90896: Missing Authentication for Critical Function

Missing Authentication for Critical Function CWE-306 in the checkout session lookup handler src/app/api/stripe/checkoutsessions/route.ts, exposed at GET /api/stripe/checkoutsessions, in MarcosCamara01 Ecommerce Template before commit 91e273c allows a remote, unauthenticated attacker holding a val...

CVE-2026-76443: Improper Neutralization

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

PT-2026-91735

Name of the Vulnerable Software and Affected Versions MarcosCamara01 Ecommerce Template versions prior to commit 91e273c Description Missing authentication in the checkout session lookup handler allows a remote, unauthenticated attacker to retrieve full session objects. By providing a valid Strip...

PT-2026-91269

Name of the Vulnerable Software and Affected Versions Cisco Secure Email Gateway versions 15.5 and earlier Cisco Secure Email and Web Manager versions 15.5 and earlier Description Multiple issues related to improper neutralization were identified during an internal security review. These issues...