Cisco Secure Email vulnerabilities

7 CVEs affecting Cisco Secure Email, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-76443, published 2026-09-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-76440, published 2026-09-14. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive…
CVE-2026-76443, published 2026-09-14. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive…
CVE-2026-76442, published 2026-09-14. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive…
CVE-2026-20353, published 2026-09-14. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive…
CVE-2025-20207, published 2025-02-05. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in Simple Network Management Protocol (SNMP) polling for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance could allow an authenticated,…
CVE-2026-20355, published 2026-09-02. Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain…
CVE-2026-20354, published 2026-09-02. Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain…