Cisco Secure Email Gateway SQL Injection Vulnerability (Cisco Cisco Secure Email)
At a glance
- Source
- NVD
- EPSS
- EPSS 29.54 % · percentile 98 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- cisco
- NVD status
- Analyzed
Description
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that contains malicious SQL statements through an affected device. A successful exploit could allow the attacker to execute arbitrary SQL statements, leading to command execution with root privileges on the underlying operating system.
Weaknesses (CWE)
- CWE-89 — Improper Neutralization of Special Elements used in an SQL Command
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | CRITICAL 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | cisco |
| CVSS 3.1 | CRITICAL 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | NVD · psirt@cisco.com (Secondary) |
European references
- ENISA EUVD · EUVD-2026-77625
- GCVE · GCVE-0-2026-76461
CERT-FR advisories
- CERTFR-2026-AVI-1175 — Multiples vulnérabilités dans les produits Cisco · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*< 15.5.5-014cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*≥ 16.0 < 16.0.4-302cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*≥ 16.5 < 16.5.0-780
Affected products
| Product | Versions |
|---|---|
| Cisco · Cisco Secure Email | affected 14.0.0-698 ; affected 13.5.1-277 ; affected 13.0.0-392 ; affected 14.2.0-620 ; affected 13.0.5-007 ; affected 13.5.4-038 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| CISA Known Exploited Vulnerabilities | CC0 1.0 |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |