Secure Email (ESA) / AsyncOS 15.5 vulnerabilities
6 advisories affect Cisco Secure Email (ESA) / AsyncOS 15.5, 5 already exploited by attackers. Latest: October 14, 2026.
Running Secure Email (ESA) / AsyncOS 15.5 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Secure Email (ESA) / AsyncOS 15.5 alerts
Turn on Secure Email (ESA) / AsyncOS 15.5 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Cisco Secure Email Gateway Relative Path Traversal Vulnerability CVE-2026-76519 · October 14, 2026 | Critical 9.8 Exploited | 5 versions, from 15.5.0-048 to 15.5.4-012 |
| Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 CVE-2026-20353 +4 · October 14, 2026 | Critical 9.8 | 6 versions, from 15.5.0-048 to 15.5.5-014; 6 versions, from 15.5.1-024 to 15.5.5-006 |
| Cisco Secure Email Gateway Arbitrary File Write Vulnerability CVE-2026-76519 · October 14, 2026 | Critical 9.8 Exploited | 5 versions, from 15.5.0-048 to 15.5.4-012 |
| Cisco Secure Email Gateway SQL Injection Vulnerability CVE-2026-76461 · September 17, 2026 | Critical 9.8 Exploited | 5 versions, from 15.5.0-048 to 15.5.4-012 |
| Cisco Secure Email Gateway SQL Injection Vulnerability CVE-2026-76461 · September 14, 2026 | Critical 9.8 Exploited | 5 versions, from 15.5.0-048 to 15.5.4-012 |
| Cisco Multiple Products Improper Input Validation Vulnerability CVE-2025-20393 · December 17, 2025 | Critical 10 Exploited | 4 versions, from 15.5.0-048 to 15.5.3-022; 4 versions, from 15.5.1-024 to 15.5.3-017 |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.
Other Secure Email (ESA) / AsyncOS versions: 16.0 · 15.0 · 14.3 · 14.2 · 14.1 · 14.0 · 13.8 · 13.6 · 13.5 · 13.0 · 12.8