جزئیات آسیب‌پذیری
CVE-2026-76440
Cisco Secure EmailCisco Secure Email and Web Manager
Cisco Secure Email Gateway Security Hardening Release
CVSS 3.1
9.8بحرانی
شرح رسمی (انگلیسی)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76440 are related to path traversal issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-23.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 9.8بحرانی | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Cisco | Cisco Secure Email | 13.0.0-392 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 13.0.5-007 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 13.5.1-277 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 13.5.4-038 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 14.0.0-698 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 14.2.0-620 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 14.2.1-020 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 14.3.0-032 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 15.0.0-104 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 15.0.1-030 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 15.0.3-002 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 15.0.5-016 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 15.5.0-048 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 15.5.1-055 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 15.5.2-018 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 15.5.3-022 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 15.5.4-012 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 15.5.5-014 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 16.0.0-050 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 16.0.0-054 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 16.0.1-017 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 16.0.2-112 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 16.0.3-044 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email | 16.0.4-016 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 12.8.1-002 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 12.8.1-021 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 13.0.0-249 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 13.0.0-277 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 13.6.1-201 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 13.6.2-023 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 13.6.2-078 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 13.8.1-052 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 13.8.1-068 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 13.8.1-074 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 13.8.1-108 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 14.0.0-404 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 14.1.0-227 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 14.2.0-203 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 14.2.0-212 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 14.2.0-224 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 14.3.0-120 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 15.0.0-334 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 15.0.1-035 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 15.0.2-007 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 15.5.1-024 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 15.5.1-029 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 15.5.2-005 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 15.5.3-017 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 15.5.4-007 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 15.5.5-006 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 16.0.0-195 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 16.0.1-010 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 16.0.2-088 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 16.0.3-016 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 16.0.4-010 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Email and Web Manager | 16.5.0-429 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۶/۲۳
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۶/۲۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- cisco
پیش‌بینی بهره‌برداری (EPSS)
۰٫۶۲٪
احتمال بهره‌برداری در ۳۰ روز
۵۰٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-23Relative Path Traversal