Secure Email (ESA) / AsyncOS 12.8 vulnerabilities
2 advisories affect Cisco Secure Email (ESA) / AsyncOS 12.8, 1 already exploited by attackers. Latest: October 14, 2026.
Running Secure Email (ESA) / AsyncOS 12.8 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Secure Email (ESA) / AsyncOS 12.8 alerts
Turn on Secure Email (ESA) / AsyncOS 12.8 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 CVE-2026-20353 +4 · October 14, 2026 | Critical 9.8 | 12.8.1-002; 12.8.1-021 |
| Cisco Multiple Products Improper Input Validation Vulnerability CVE-2025-20393 · December 17, 2025 | Critical 10 Exploited | 12.8.1-002; 12.8.1-021 |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.
Other Secure Email (ESA) / AsyncOS versions: 16.0 · 15.5 · 15.0 · 14.3 · 14.2 · 14.1 · 14.0 · 13.8 · 13.6 · 13.5 · 13.0