CVE-2026-20353: Cisco Secure Email Gateway Security Hardening Release
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20353 are related to issues with improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit the vulnerability?
The CVSS vector indicates exploitation is network-based, requires low attack complexity, and does not require privileges or user interaction.
What is the potential impact if exploitation succeeds?
The CVSS vector rates confidentiality, integrity, and availability impacts as high. The vulnerability has a critical severity score of 9.8.
Which systems should be included in triage?
Triage should include Cisco Secure Email Gateway and Cisco Secure Email and Web Manager deployments. The provided information does not identify affected software versions or configurations.