VulnSocial

CVE-2026-20353

LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

Back to dashboard
0.0/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 5 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Peaked 1d ago at 3 mentions (2026-09-14); latest day: 2
  • 5 total mentions across 2 days

Deep dive

Activity timeline5 mentions / 2d
01223Mentions · 2026-09-14: 3Mentions · 2026-09-15: 209-1409-15
Referenced assets5 URLs
Full discourse5 posts
  • にゃん☆たく/takumi.a@taku888infinity

    ・CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX 『（直訳）Cisco Secure Email Gateway 用の Cisco AsyncOS ソフトウェアのメール解析機能に脆弱性があり、認証されていないリモート攻撃者が、基盤となるオペレーティングシステム上でルート権限で任意のコマンドを実行できる可能性』 →KEV追加 ・CVE-2026-20353/CVE-2026-76440/CVE-2026-76441/CVE-2026-76442/CVE-2026-76443 Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm 『（直訳）これらの脆弱性は、社内テスト中に発見されました。そのうちの1つは、実際に悪用されていることが確認されています。』

    210331.3K
    11.8K followersView on X
  • Rıdvan Yağlı@ridvanyagli

    🚨 Cisco Secure Email Gateway'de 2 yeni güvenlik açığı! Cisco Secure Email Gateway ve Secure Email and Web Manager ürünlerinde CVE-2026-76461 ve CVE-2026-20353 numaralı güvenlik açıkları yayınlandı. 🔴 CVE-2026-76461 — CVSS 9.8 AsyncOS'taki kritik SQL Injection (CWE-89) açığı, kimlik doğrulaması gerektirmeden uzaktan istismar edilebiliyor. Özel hazırlanmış e-postalar üzerinden gerçekleştirilebilecek başarılı bir saldırının root yetkileriyle keyfi komut çalıştırılmasına yol açabileceği belirtiliyor. 🟠 CVE-2026-20353 CWE-664 kapsamında sınıflandırılan açık, kaynakların yaşam döngüsü boyunca uygun şekilde kontrol edilmemesiyle ilişkili. Kaynak tükenmesi ve bunun sonucunda servis kesintisi/DoS riski oluşturabileceği belirtiliyor. Cisco Secure Email Gateway kullanan sistem yöneticilerinin ilgili güvenlik güncellemelerini takip ederek uygulaması gerekiyor.

    00030395
    2.3K followersView on X
  • NCIIPC India@NCIIPC

    #Cisco has released software updates to address #Critical vulnerabilities in Secure Email Gateway and Secure Email and Web Manager. Apply Updates! #CVE-2026-76440 #CVE-2026-76441 #CVE-2026-20353 #CVE-2026-76443 https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-hardening-esa-dfCrfXkm.html

    00010171
    8.5K followersView on X
  • ThreatAft@ThreatAft

    🔐 🚨 CISCO SECURE EMAIL GATEWAY — CVSS 9.8 ×2 CVE-2026-76441: Improper Access Control (CWE-284) CVE-2026-20353: Improper Resource Lifetime (CWE-664) → https://threataft.com/articles/cisco-secure-email-gateway-cve-2026-76441-cve-2026-20353-hardening #Cisco #CVE #EmailSecurity #CVSS9 #PatchNow #CyberSecurity #ThreatIntel

    0000049
    43 followersView on X
  • Kaitan ID Security@KaitanSecurity

    🚨 CRITICAL — CVE-2026-20353 Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 CVSS 9.8 🔴 No patch yet Full analysis → https://sec.kaitan.id/cves/CVE-2026-20353 #Cisco #CyberSecurity #InfoSec

    0000053
    86 followersView on X

Explore more

Back to dashboard