by Kastro
Paper/Archive/CVE-2026-76441

CVE-2026-76441

Cisco Cisco Secure Email and Web Manager — Cisco Secure Email Gateway Security Hardening Release

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 45.0.450 × 209.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76441 are related to issues with improper access control that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.

Affected

ProductAffectedFixed inSource
Cisco Secure Email and Web Manager13.6.2-023–CNA
Cisco Secure Email and Web Manager13.6.2-078–CNA
Cisco Secure Email and Web Manager13.0.0-249–CNA
Cisco Secure Email and Web Manager13.0.0-277–CNA
Cisco Secure Email and Web Manager13.8.1-052–CNA
Cisco Secure Email and Web Manager13.8.1-068–CNA
Cisco Secure Email and Web Manager13.8.1-074–CNA
Cisco Secure Email and Web Manager14.0.0-404–CNA
Cisco Secure Email and Web Manager12.8.1-002–CNA
Cisco Secure Email and Web Manager14.1.0-227–CNA
Cisco Secure Email and Web Manager13.6.1-201–CNA
Cisco Secure Email and Web Manager14.2.0-203–CNA

Scores by source

cisco (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkmrefcve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification