Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of message integrity. An attacker could exploit these vulnerabilities by using a machine-in-the-middle technique to intercept and modify traffic between email gateways. A successful exploit could allow the attacker to obtain plaintext content from the encrypted communication.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-09-03 | 1 | Patch1 |
| 2026-09-06 | 1 | Disclosure1 |
| 2026-09-07 | 1 | Disclosure1 |
Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities (CVE-2026-20354 and CVE-2026-20355) - https://www.securityweek.com/cisco-warns-of-unpatched-secure-email-flaws-patches-critical-switch-vulnerabilities/
Post summary
Cisco announced patches for CVE-2026-20354 and CVE-2026-20355, but the article does not provide PoC, exploit, or technical details.
Cisco Secure EmailにS/MIMEの脆弱性(CVE-2026-20354,CVE-2026-20355)、暗号化メールの平文取得につながる可能性 IP電話のDoSも公表 https://rocket-boys.co.jp/security-measures-lab/cisco-secure-email-smime-cve-incident/ #セキュリティ対策Lab #security #securitynews #セキュリティ #脆弱性
Post summary
The article announces the discovery of two S/MIME vulnerabilities in Cisco Secure Email that could enable plaintext access to encrypted messages and cause IP telephone denial‑of‑service, though no exploitation details or patches are provided.
Cisco warns of unpatched Secure Email flaws (CVE-2026-20354/5) enabling MitM attacks via S/MIME decryption. This directly threatens data privacy & integrity in transit. (Sep 3, 2026) #Cybersecurity #NetworkSecurity #News
Post summary
Cisco highlights the existence of unpatched Secure Email CVEs that could enable MitM attacks through S/MIME decryption, underscoring data privacy risks without claiming active exploitation or available fixes.