by Kastro
Paper/Archive/CVE-2026-76440

CVE-2026-76440

Cisco Cisco Secure Email — Cisco Secure Email Gateway Security Hardening Release

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 49.9.499 × 2010.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76440 are related to path traversal issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-23.

Affected

ProductAffectedFixed inSource
Cisco Secure Email14.0.0-698–CNA
Cisco Secure Email13.5.1-277–CNA
Cisco Secure Email13.0.0-392–CNA
Cisco Secure Email14.2.0-620–CNA
Cisco Secure Email13.0.5-007–CNA
Cisco Secure Email13.5.4-038–CNA
Cisco Secure Email14.2.1-020–CNA
Cisco Secure Email14.3.0-032–CNA
Cisco Secure Email15.0.0-104–CNA
Cisco Secure Email15.0.1-030–CNA
Cisco Secure Email15.5.0-048–CNA
Cisco Secure Email15.5.1-055–CNA

Scores by source

cisco (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkmrefcve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification