9.8
Critical
CVE-2026-76440 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and…
Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76440 are related to path traversal issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-23.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Secure Email 16.0 | 16.0.0-050 → 16.0.4-016 | No fix stated |
| Cisco Secure Email 15.5 | 15.5.0-048 → 15.5.5-014 | No fix stated |
| Cisco Secure Email 15.0 | 15.0.0-104 → 15.0.5-016 | No fix stated |
| Cisco Secure Email | 14.3.0-032 | No fix stated |
| Cisco Secure Email 14.2 | 14.2.0-620 → 14.2.1-020 | No fix stated |
| Cisco Secure Email | 14.0.0-698 | No fix stated |
| Cisco Secure Email 13.5 | 13.5.1-277 → 13.5.4-038 | No fix stated |
| Cisco Secure Email 13.0 | 13.0.0-392 → 13.0.5-007 | No fix stated |
| Cisco Secure Email and Web Manager | 16.5.0-429 | No fix stated |
Show the 11 other branches Hide the 11 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Secure Email and Web Manager 16.0 | 16.0.0-195 → 16.0.4-010 | No fix stated |
| Cisco Secure Email and Web Manager 15.5 | 15.5.1-024 → 15.5.5-006 | No fix stated |
| Cisco Secure Email and Web Manager 15.0 | 15.0.0-334 → 15.0.2-007 | No fix stated |
| Cisco Secure Email and Web Manager | 14.3.0-120 | No fix stated |
| Cisco Secure Email and Web Manager 14.2 | 14.2.0-203 → 14.2.0-224 | No fix stated |
| Cisco Secure Email and Web Manager | 14.1.0-227 | No fix stated |
| Cisco Secure Email and Web Manager | 14.0.0-404 | No fix stated |
| Cisco Secure Email and Web Manager 13.8 | 13.8.1-052 → 13.8.1-108 | No fix stated |
| Cisco Secure Email and Web Manager 13.6 | 13.6.1-201 → 13.6.2-078 | No fix stated |
| Cisco Secure Email and Web Manager 13.0 | 13.0.0-249 → 13.0.0-277 | No fix stated |
| Cisco Secure Email and Web Manager 12.8 | 12.8.1-002 → 12.8.1-021 | No fix stated |
References
- cisco-sa-hardening-esa-dfCrfXkm sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Secure Email
The 29 CVEs of Cisco Secure Email →
CVE-2026-76519
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
9.8
Critical
CVE-2026-76442
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and…
7.5
High
CVE-2026-76461
Cisco Secure Email Gateway SQL Injection Vulnerability
9.8
Critical
CVE-2026-76443
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and…
9.8
Critical