Secure Email and Web

CVE-2026-76442: Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review.

Published

ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityHIGHCVSS 3.1 7.5
EPSS0.47%Chance of exploitation in 30 days
Public exploitNot tracked
FixNot yet

Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.

Affected and fixed versions

Product / branchFixed in
Cisco Secure Email 14.0See the advisory
Cisco Secure Email 13.5See the advisory
Cisco Secure Email 13.0See the advisory
Cisco Secure Email 14.2See the advisory
Cisco Secure Email 13.0See the advisory
Cisco Secure Email 13.5See the advisory
Cisco Secure Email 14.2See the advisory
Cisco Secure Email 14.3See the advisory
Cisco Secure Email 15.0See the advisory
Cisco Secure Email 15.0See the advisory
Cisco Secure Email 15.5See the advisory
Cisco Secure Email 15.5See the advisory
Cisco Secure Email 15.5See the advisory
Cisco Secure Email 16.0See the advisory
Cisco Secure Email 15.0See the advisory
Cisco Secure Email 16.0See the advisory
Cisco Secure Email 15.5See the advisory
Cisco Secure Email 16.0See the advisory
Cisco Secure Email 15.5See the advisory
Cisco Secure Email 16.0See the advisory
Cisco Secure Email 15.0See the advisory
Cisco Secure Email 16.0See the advisory
Cisco Secure Email 16.0See the advisory
Cisco Secure Email 16.5See the advisory
Cisco Secure Email and Web Manager 13.6See the advisory
Cisco Secure Email and Web Manager 13.6See the advisory
Cisco Secure Email and Web Manager 13.0See the advisory
Cisco Secure Email and Web Manager 13.0See the advisory
Cisco Secure Email and Web Manager 13.8See the advisory
Cisco Secure Email and Web Manager 13.8See the advisory
Cisco Secure Email and Web Manager 13.8See the advisory
Cisco Secure Email and Web Manager 14.0See the advisory
Cisco Secure Email and Web Manager 12.8See the advisory
Cisco Secure Email and Web Manager 14.1See the advisory
Cisco Secure Email and Web Manager 13.6See the advisory
Cisco Secure Email and Web Manager 14.2See the advisory
Cisco Secure Email and Web Manager 14.2See the advisory
Cisco Secure Email and Web Manager 12.8See the advisory
Cisco Secure Email and Web Manager 13.8See the advisory
Cisco Secure Email and Web Manager 14.2See the advisory
Cisco Secure Email and Web Manager 14.3See the advisory
Cisco Secure Email and Web Manager 15.0See the advisory
Cisco Secure Email and Web Manager 15.5See the advisory
Cisco Secure Email and Web Manager 15.5See the advisory
Cisco Secure Email and Web Manager 15.5See the advisory
Cisco Secure Email and Web Manager 16.0See the advisory
Cisco Secure Email and Web Manager 15.5See the advisory
Cisco Secure Email and Web Manager 16.0See the advisory
Cisco Secure Email and Web Manager 15.0See the advisory
Cisco Secure Email and Web Manager 16.0See the advisory
Cisco Secure Email and Web Manager 15.5See the advisory
Cisco Secure Email and Web Manager 15.0See the advisory
Cisco Secure Email and Web Manager 16.0See the advisory
Cisco Secure Email and Web Manager 16.0See the advisory
Cisco Secure Email and Web Manager 16.5See the advisory

Always confirm against the vendor advisory, which lists every fixed hotfix.

What it is

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-76442 are related to issues with improper validation of specified quantity in input that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-1284.

Exploitation

Except as otherwise noted previously, the Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.

Sources

KEV status, EPSS score and vendor data refreshed automatically, last on 11 Oct 2026.

Get alerts

A notification when we publish a new analysis or a covered vendor gets a new actively exploited CVE. No account, no email.