Secure Email (ESA) / AsyncOS 13.8 vulnerabilities
2 advisories affect Cisco Secure Email (ESA) / AsyncOS 13.8, 1 already exploited by attackers. Latest: October 14, 2026.
Running Secure Email (ESA) / AsyncOS 13.8 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Secure Email (ESA) / AsyncOS 13.8 alerts
Turn on Secure Email (ESA) / AsyncOS 13.8 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 CVE-2026-20353 +4 · October 14, 2026 | Critical 9.8 | 4 versions, from 13.8.1-052 to 13.8.1-108 |
| Cisco Multiple Products Improper Input Validation Vulnerability CVE-2025-20393 · December 17, 2025 | Critical 10 Exploited | 4 versions, from 13.8.1-052 to 13.8.1-108 |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.
Other Secure Email (ESA) / AsyncOS versions: 16.0 · 15.5 · 15.0 · 14.3 · 14.2 · 14.1 · 14.0 · 13.6 · 13.5 · 13.0 · 12.8