Cisco Secure Email Gateway Security Hardening Release
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: yes
- Technical impact: total
Summary
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76441 are related to issues with improper access control that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: total
- Record last updated
Affected versions
- Cisco Cisco Secure Email and Web Manager
13.6.2-023, 13.6.2-078, 13.0.0-249, 13.0.0-277, 13.8.1-052, 13.8.1-068, 13.8.1-074, 14.0.0-404, 12.8.1-002, 14.1.0-227, 13.6.1-201, 14.2.0-203, 14.2.0-212, 12.8.1-021, 13.8.1-108, 14.2.0-224, 14.3.0-120, 15.0.0-334, 15.5.1-024, 15.5.1-029, 15.5.2-005, 16.0.0-195, 15.5.3-017, 16.0.1-010, 15.0.1-035, 16.0.2-088, 15.5.4-007, 15.0.2-007, 16.0.4-010, 16.0.3-016