Multiple vulnerabilities in Cisco Secure Email and Web Manager and Cisco Secure Email Gateway (physical and virtual) could allow a remote attacker to cause denial of service, privilege escalation, security restriction bypass, remote code execution, or cross-site scripting. The article does not provide specific CVSS scores, affected version ranges, fixed versions, or workarounds; administrators must consult the linked Cisco advisories for these critical details and apply the vendor-provided fixes.
Multiple vulnerabilities were identified in Cisco Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, security restriction bypass, remote code execution and cross-site scripting on the targeted system. Note: CVE-2026... Impact Security Restriction Bypass Cross-Site Scripting Denial of Service Elevation of Privilege Remote Code Execution System / Technologies affected Cisco Secure Email and Web Manager Cisco Secure Email Gateway (both physical and virtual) For affected versions, please refer to the link issued by the vendor: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX Solutions Before installation of the software, please visit the vendor web-site for more details. Apply fixes issued by the vendor: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX