Skip to content
fr Sign in
5.8 Medium

CVE-2020-26082 A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could…

Description

A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass content filters that are configured on an affected device. The vulnerability is due to improper handling of password-protected zip files. An attacker could exploit this vulnerability by sending a malicious file inside a crafted zip-compressed file to an affected device. A successful exploit could allow the attacker to bypass configured content filters that would normally drop the email.

Affected products and versions

Product Affected versions Fixed in
Cisco Secure Email Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Secure Email

The 29 CVEs of Cisco Secure Email →
CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability 9.8 Critical CVE-2026-76442 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and… 7.5 High CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability 9.8 Critical CVE-2026-76443 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and… 9.8 Critical
Track this CVE