Secure Email (ESA) / AsyncOS 14.0 vulnerabilities
6 advisories affect Cisco Secure Email (ESA) / AsyncOS 14.0, 5 already exploited by attackers. Latest: October 14, 2026.
Running Secure Email (ESA) / AsyncOS 14.0 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Secure Email (ESA) / AsyncOS 14.0 alerts
Turn on Secure Email (ESA) / AsyncOS 14.0 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Cisco Secure Email Gateway Relative Path Traversal Vulnerability CVE-2026-76519 · October 14, 2026 | Critical 9.8 Exploited | 14.0.0-698 |
| Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 CVE-2026-20353 +4 · October 14, 2026 | Critical 9.8 | 14.0.0-698; 14.0.0-404 |
| Cisco Secure Email Gateway Arbitrary File Write Vulnerability CVE-2026-76519 · October 14, 2026 | Critical 9.8 Exploited | 14.0.0-698 |
| Cisco Secure Email Gateway SQL Injection Vulnerability CVE-2026-76461 · September 17, 2026 | Critical 9.8 Exploited | 14.0.0-698 |
| Cisco Secure Email Gateway SQL Injection Vulnerability CVE-2026-76461 · September 14, 2026 | Critical 9.8 Exploited | 14.0.0-698 |
| Cisco Multiple Products Improper Input Validation Vulnerability CVE-2025-20393 · December 17, 2025 | Critical 10 Exploited | 14.0.0-698; 14.0.0-404 |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.
Other Secure Email (ESA) / AsyncOS versions: 16.0 · 15.5 · 15.0 · 14.3 · 14.2 · 14.1 · 13.8 · 13.6 · 13.5 · 13.0 · 12.8