Cisco Secure Email CVE-2026-20355

Exploitation requires the attacker to achieve a machine-in-the-middle network position between email gateways - specifically, the ability to intercept and modify SMTP traffic carrying S/MIME-encrypted messages in transit. The Cisco Secure Email gateway must have S/MIME decryption enabled and actively in use; organizations not using gateway-level S/MIME decryption are not affected. No authentication is required (PR:N per CVSS), but the MITM positioning requirement (AC:H) limits exploitation to attackers with meaningful network access or routing influence. Exploitation is further constrained by the need to conduct an iterative oracle interaction, which may be detectable through anomalous bounce or error traffic patterns. Client-to-client S/MIME implementations that do not route through Cisco Secure Email are not affected.

The CVSS 5.9 score (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) reflects two competing signals: the confidentiality impact is high (full plaintext recovery), but the attack complexity is high because the attacker must achieve a machine-in-the-middle position between email gateways - a prerequisite that is non-trivial but achievable via BGP hijacking, DNS poisoning, or compromise of a transit network. For organizations whose email traffic traverses untrusted networks or cloud relay infrastructure, the realistic risk is elevated. No EPSS data was provided; no KEV listing exists; no POC has been identified. The scope of impact is bounded (S:U) - exploitation affects confidentiality of email content passing through the gateway, with no integrity or availability impact noted. For enterprises handling sensitive communications (legal, financial, healthcare), the potential data exposure warrants urgent patching despite the moderate overall CVSS score.

An attacker with BGP or DNS hijacking capability, or with access to a transit network segment between two organizations' email gateways, intercepts an S/MIME-encrypted SMTP session. The attacker iteratively modifies ciphertext blocks and forwards the manipulated messages to the decrypting Cisco Secure Email gateway, using differential responses (bounce messages, error codes, or timing) as an oracle to recover the plaintext byte-by-byte, revealing the content of encrypted email that was assumed to be confidential.