Cisco Secure Email Gateway Security Hardening Release

Summary

CVECVE-2026-76442
StatePUBLISHED
Assignercisco
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-09-14 17:17:50 UTC
Updated2026-09-14 17:17:50 UTC
DescriptionAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76442 are related to issues with improper validation of specified quantity in input that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-1284.

Risk And Classification

Primary CVSS: v3.1 7.5 HIGH from [email protected]

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Problem Types: CWE-1284 | CWE-1284 Improper Validation of Specified Quantity in Input


VersionSourceTypeScoreSeverityVector
3.1[email protected]Primary7.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1CNACVSSV3_17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v3.1 Breakdown

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Cisco Cisco Secure Email affected 14.0.0-698 Not specified
CNA Cisco Cisco Secure Email affected 13.5.1-277 Not specified
CNA Cisco Cisco Secure Email affected 13.0.0-392 Not specified
CNA Cisco Cisco Secure Email affected 14.2.0-620 Not specified
CNA Cisco Cisco Secure Email affected 13.0.5-007 Not specified
CNA Cisco Cisco Secure Email affected 13.5.4-038 Not specified
CNA Cisco Cisco Secure Email affected 14.2.1-020 Not specified
CNA Cisco Cisco Secure Email affected 14.3.0-032 Not specified
CNA Cisco Cisco Secure Email affected 15.0.0-104 Not specified
CNA Cisco Cisco Secure Email affected 15.0.1-030 Not specified
CNA Cisco Cisco Secure Email affected 15.5.0-048 Not specified
CNA Cisco Cisco Secure Email affected 15.5.1-055 Not specified
CNA Cisco Cisco Secure Email affected 15.5.2-018 Not specified
CNA Cisco Cisco Secure Email affected 16.0.0-050 Not specified
CNA Cisco Cisco Secure Email affected 15.0.3-002 Not specified
CNA Cisco Cisco Secure Email affected 16.0.0-054 Not specified
CNA Cisco Cisco Secure Email affected 15.5.3-022 Not specified
CNA Cisco Cisco Secure Email affected 16.0.1-017 Not specified
CNA Cisco Cisco Secure Email affected 15.5.4-012 Not specified
CNA Cisco Cisco Secure Email affected 16.0.4-016 Not specified
CNA Cisco Cisco Secure Email affected 15.0.5-016 Not specified
CNA Cisco Cisco Secure Email affected 16.0.2-112 Not specified
CNA Cisco Cisco Secure Email affected 16.0.3-044 Not specified
CNA Cisco Cisco Secure Email affected 16.5.0-780 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 13.6.2-023 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 13.6.2-078 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 13.0.0-249 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 13.0.0-277 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 13.8.1-052 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 13.8.1-068 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 13.8.1-074 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 14.0.0-404 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 12.8.1-002 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 14.1.0-227 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 13.6.1-201 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 14.2.0-203 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 14.2.0-212 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 12.8.1-021 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 13.8.1-108 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 14.2.0-224 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 14.3.0-120 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 15.0.0-334 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 15.5.1-024 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 15.5.1-029 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 15.5.2-005 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 16.0.0-195 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 15.5.3-017 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 16.0.1-010 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 15.0.1-035 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 16.0.2-088 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 15.5.4-007 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 15.0.2-007 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 16.0.4-010 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 16.0.3-016 Not specified
CNA Cisco Cisco Secure Email And Web Manager affected 16.5.0-429 Not specified

References

ReferenceSourceLinkTags
sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-harden... [email protected] sec.cloudapps.cisco.com
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Additional Advisory Data

Exploits

CNA: Except as otherwise noted previously, the Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report