Skip to main content

Cisco Secure Email CVE-2026-76442

| EUVDEUVD-2026-77626 HIGH
Improper Validation of Specified Quantity in Input (CWE-1284)
2026-09-14 cisco GHSA-wq94-r9v8-g7wm
Information Disclosure Cisco Cisco Secure Email Cisco Secure Email And Web Manager
7.5
CVSS 3.1 · Vendor: cisco
Share

Severity by source

Vendor (cisco) PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (cisco) · only source for this CVE.

CVSS VectorVendor: cisco

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

2
Analysis Generated
Sep 15, 2026 - 11:28 vuln.today
CVE Published
Sep 14, 2026 - 16:09 cve.org
HIGH 7.5

DescriptionCVE.org

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-76442 are related to issues with improper validation of specified quantity in input that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-1284.

AnalysisAI

Cisco Secure Email Gateway and Cisco Secure Email and Web Manager ship a hardening release that fixes multiple internally discovered input-validation defects grouped under CVE-2026-76442 (CWE-1284, improper validation of specified quantity in input). Successful exploitation by an unauthenticated remote attacker degrades availability (CVSS 3.1 7.5, AV:N/AC:L/PR:N/UI:N, C:N/I:N/A:H) on the affected appliances, potentially interrupting mail flow and administrative access. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Cisco Secure Email

View all
CVE-2026-76461 CRITICAL POC
9.8 Sep 14

We need answer as JSON only. Need synthesize. Need be careful with fields. Let's analyze input. CVE-2026-76461. Descrip
CVE-2026-76440 CRITICAL
9.8 Sep 14

We need answer only JSON object per user. Need synthesize. Let's parse input. CVE-2026-76440. Description: Cisco Secure
CVE-2026-20353 CRITICAL
9.8 Sep 14

We need answer as JSON only. Need synthesize. Need be careful. Let's analyze input. CVE-2026-20353. Description generic

CVE-2026-76443 CRITICAL
9.8 Sep 14

We need answer as JSON only. Need synthesize. Let's parse input. CVE-2026-76443. Description: Cisco internal security r
CVE-2026-20355 MEDIUM
5.9 Sep 02

Plaintext recovery from S/MIME-encrypted email is possible in Cisco Secure Email due to insufficient message integrity v
CVE-2026-20354 MEDIUM
5.9 Sep 02

Plaintext recovery from S/MIME-encrypted email is possible in Cisco Secure Email due to insufficient validation of messa

Same weakness CWE-1284 – Improper Validation of Specified Quantity in Input

View all
CVE-2025-9316 MEDIUM POC
6.9
CVE-2026-49777 CRITICAL POC
10.0
CVE-2022-37134 CRITICAL POC
9.8
CVE-2021-43267 CRITICAL POC
9.8
CVE-2025-65548 CRITICAL POC
9.1
CVE-2023-54337 CRITICAL POC
9.1
CVE-2025-5349 HIGH POC
8.8
CVE-2026-82750 HIGH POC
8.3

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2026-76442 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy