Improper Resource Control in Cisco Secure Email Products
CVE-2026-20353

9.8CRITICAL

Key Information:

Vendor

Cisco
Status
Cisco Secure Email
Vendor
CVE Published:
14 September 2026

Badges

👾 Exploit Exists

What is CVE-2026-20353?

Cisco Secure Email Gateway and Cisco Secure Email and Web Manager are susceptible to vulnerabilities arising from improper control of a resource through its lifecycle. This weakness is classified under CWE-664 and could potentially allow for unauthorized access or manipulation of sensitive data, exposing organizations to significant security risks. Cisco's engineering team has responded by implementing critical software hardening releases, aimed at strengthening the overall security posture of their email protection solutions.

Affected Version(s)

Cisco Secure Email 14.0.0-698

Cisco Secure Email 13.5.1-277

Cisco Secure Email 13.0.0-392

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.