Skip to main content

Cisco Secure Email CVE-2026-20353

| EUVDEUVD-2026-77621 CRITICAL
Improper Control of a Resource Through its Lifetime (CWE-664)
2026-09-14 cisco GHSA-2xw5-xcxg-33qg
Information Disclosure Cisco Cisco Secure Email
9.8
CVSS 3.1 · Vendor: cisco
Share

Severity by source

Vendor (cisco) PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (cisco) · only source for this CVE.

CVSS VectorVendor: cisco

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
Analysis Generated
Sep 15, 2026 - 11:30 vuln.today
CVE Published
Sep 14, 2026 - 16:08 cve.org
CRITICAL 9.8

DescriptionCVE.org

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20353 are related to issues with improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.

AnalysisAI

We need answer as JSON only. Need synthesize. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Cisco Secure Email

View all
CVE-2026-76461 CRITICAL POC
9.8 Sep 14

We need answer as JSON only. Need synthesize. Need be careful with fields. Let's analyze input. CVE-2026-76461. Descrip
CVE-2026-76443 CRITICAL
9.8 Sep 14

We need answer as JSON only. Need synthesize. Let's parse input. CVE-2026-76443. Description: Cisco internal security r
CVE-2026-76440 CRITICAL
9.8 Sep 14

We need answer only JSON object per user. Need synthesize. Let's parse input. CVE-2026-76440. Description: Cisco Secure
CVE-2026-76442 HIGH
7.5 Sep 14

Cisco Secure Email Gateway and Cisco Secure Email and Web Manager ship a hardening release that fixes multiple internall
CVE-2026-20355 MEDIUM
5.9 Sep 02

Plaintext recovery from S/MIME-encrypted email is possible in Cisco Secure Email due to insufficient message integrity v
CVE-2026-20354 MEDIUM
5.9 Sep 02

Plaintext recovery from S/MIME-encrypted email is possible in Cisco Secure Email due to insufficient validation of messa

Same weakness CWE-664 – Improper Control of a Resource Through its Lifetime

View all
CVE-2022-27518 CRITICAL
9.8
CVE-2024-22365 MEDIUM POC
5.5
CVE-2022-28287 MEDIUM POC
6.5
CVE-2022-22249 MEDIUM POC
6.5
CVE-2022-31153 MEDIUM POC
6.5
CVE-2026-86203 MEDIUM POC
6.3
CVE-2026-20274 CRITICAL
9.8
CVE-2024-45383 MEDIUM POC
5.0

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2026-20353 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy