by Kastro
Paper/Archive/CVE-2026-20353

CVE-2026-20353

Cisco Cisco Secure Email — Cisco Secure Email Gateway Security Hardening Release

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 44.8.448 × 209.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20353 are related to issues with improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.

Affected

ProductAffectedFixed inSource
Cisco Secure Email14.0.0-698–CNA
Cisco Secure Email13.5.1-277–CNA
Cisco Secure Email13.0.0-392–CNA
Cisco Secure Email14.2.0-620–CNA
Cisco Secure Email13.0.5-007–CNA
Cisco Secure Email13.5.4-038–CNA
Cisco Secure Email14.2.1-020–CNA
Cisco Secure Email14.3.0-032–CNA
Cisco Secure Email15.0.0-104–CNA
Cisco Secure Email15.0.1-030–CNA
Cisco Secure Email15.5.0-048–CNA
Cisco Secure Email15.5.1-055–CNA

Scores by source

cisco (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkmrefcve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification