Cisco Secure Email (ESA) / AsyncOS vulnerabilities

6 advisories, 5 actively exploited. Last update: October 14, 2026.

Running Secure Email (ESA) / AsyncOS devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Secure Email (ESA) / AsyncOS alerts

CVE-2026-76519October 14, 2026Critical 9.8Exploited
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
CVE-2026-20353 +4October 14, 2026Critical 9.8
Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026
CVE-2026-76519October 14, 2026Critical 9.8Exploited
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
CVE-2026-76461September 17, 2026Critical 9.8Exploited
Cisco Secure Email Gateway SQL Injection Vulnerability
CVE-2026-76461September 14, 2026Critical 9.8Exploited
Cisco Secure Email Gateway SQL Injection Vulnerability
CVE-2025-20393December 17, 2025Critical 10Exploited
Cisco Multiple Products Improper Input Validation Vulnerability