Cisco Patches Zero-Day RCE Exploited by China-Linked APT in Secure Email Gateways

🗓️ 16 Jan 2026 05:38:00Reported by The Hacker NewsType

Cisco patches CVE-2025-20393 remote code execution in AsyncOS for Secure Email Gateway exploited by a China-linked advanced persistent threat.

Reporter	Title	Published	Views	Family All 25
GithubExploit	Exploit for CVE-2025-20393	18 Dec 202512:10	–	githubexploit
GithubExploit	Exploit for CVE-2025-20393	18 Dec 202507:25	–	githubexploit
ATTACKERKB	CVE-2025-20393	17 Dec 202516:47	–	attackerkb
BDU FSTEC	The vulnerability of the Spam Quarantine function in the Cisco AsyncOS operating system, within the tools of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, allows a malicious user to execute arbitrary code with root privileges.	19 Dec 202500:00	–	bdu_fstec
Circl	CVE-2025-20393	17 Dec 202517:03	–	circl
CISA KEV Catalog	Cisco Multiple Products Improper Input Validation Vulnerability	17 Dec 202500:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	17 Dec 202512:00	–	cisa
Cisco	Reports About Cyberattacks Against Cisco Secure Email Gateway And Cisco Secure Email and Web Manager	17 Dec 202516:00	–	cisco
Tenable Nessus	Cisco Secure Email and Web Manager RCE (cisco-sa-sma-attack-N9bf4)	25 Feb 202600:00	–	nessus
Tenable Nessus	Cisco Secure Email Gateway RCE (cisco-sa-sma-attack-N9bf4)	16 Jan 202600:00	–	nessus