Known vulnerabilities in Secure Email Gateway

Software CPE: cpe:2.3:a:cisco_systems:secure_email_gateway:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Secure Email Gateway Secure Email Gateway is affected by 13 known vulnerabilities: 4 critical, 4 high, 4 medium, 1 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU149712 - Relative Path Traversal
CVE-2026-76440
CWE-23 High
No
No
15.5.5-014, 16.5.0-780 14.09.2026 SB20260914146
#VU149713 - Improper Access Control
CVE-2026-76441
CWE-284 High
No
No
15.5.5-014, 16.5.0-780 14.09.2026 SB20260914146
#VU149714 - Improper control of a resource through its lifetime
CVE-2026-20353
CWE-664 High
No
No
15.5.5-014, 16.5.0-780 14.09.2026 SB20260914146
#VU149715 - Improper Neutralization
CVE-2026-76443
CWE-707 High
No
No
15.5.5-014, 16.5.0-780 14.09.2026 SB20260914146
#VU149716 - Improper Validation of Specified Quantity in Input
CVE-2026-76442
CWE-1284 Medium
No
No
15.5.5-014, 16.5.0-780 14.09.2026 SB20260914146
#VU149711 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-76461
CWE-89 Critical
No
Exploited
15.5.5-014, 16.0.4-302, 16.5.0-780 14.09.2026 SB2026091491
#VU146771 - Insufficient Verification of Data Authenticity
CVE-2026-20354
CWE-345 Medium
No
No
- 02.09.2026 SB2026090284
#VU146772 - Improper Validation of Integrity Check Value
CVE-2026-20355
CWE-354 Medium
No
No
- 02.09.2026 SB2026090284
#VU120181 - Improper input validation
CVE-2025-20393
CWE-20 Critical
No
Exploited
15.0.5-016, 15.5.4-012, 16.0.4-016 17.12.2025 SB2025121749
#VU103668 - Exposure of sensitive information to an unauthorized actor
CVE-2025-20207
CWE-200 Medium
No
No
15.0.3-002, 15.5.2-018, 16.0.0-050 06.02.2025 SB2025020619
#VU94506 - Server-Side Request Forgery (SSRF)
CVE-2024-20429
CWE-918 Low
No
No
14.2.3-027, 15.0.0-097, 15.5.1-055 17.07.2024 SB20240717138
#VU94505 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-20401
CWE-22 Critical
No
No
13.0.5-007, 13.5.4-038, 14.2.2-004, 14.3.0-032, 15.0.0-104, 15.0.1-030, 15.5.1-055 17.07.2024 SB20240717137
#VU64421 - Improper Authentication
CVE-2022-20798
CWE-287 Critical
No
No
- 15.06.2022 SB2022061590