Cisco product
Secure Email
Tracked since 3 Sep · latest article 19 Oct · RSS · API
None open
of 0 in the full CISA catalogue · all time
EPSS top 5%, not in KEV
none this week
Exploited, by due date
No Secure Email CVE is in the CISA KEV catalogue.
Patch cadence and exploit odds
How often CISA adds Secure Email CVEs, how many have a fix, and where their exploit odds sit.
Added to CISA KEV per quarter
CISA has not added a Secure Email CVE to KEV.
Fix listed
0 of 7 CVEs in coverage
7 CVEs have no vendor fix recorded yet.
EPSS percentile of each CVE
One dot per CVE; a red diamond marks those in CISA KEV.
Show as tableHide table
| CVE | EPSS percentile |
|---|---|
| CVE-2026-76519 | 82 |
| CVE-2026-76440 | 49.7 |
| CVE-2026-76443 | 44.6 |
| CVE-2026-20353 | 44.6 |
| CVE-2026-76442 | 40.3 |
| CVE-2026-20355 | 10.2 |
| CVE-2026-20354 | 10.2 |
Coverage12 articles · all time
The latest 12 articles naming Secure Email, in the shared story grammar.
12 articles from 7 outlets since 3 Sep. Quiet since 19 Oct.
- Thu 3 Sep, 11:11 UTC. SecurityWeek, first report. Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities.
- Thu 3 Sep, 17:37 UTC. SecurityOnline, its first report on the story. Cisco Secure Email S/MIME Flaws Publicly Disclosed.
- Tue 15 Sep, 04:41 UTC. SecurityOnline. Cisco Patches Actively Exploited Flaws in Secure Email Appliances.
- Wed 14 Oct, 19:26 UTC. The Hacker News, its first report on the story. Cisco Email Gateway Flaw Exploited to Run Commands as Root. Cites a CVE in CISA KEV.
- Wed 14 Oct, 19:33 UTC. CISA, its first report on the story. CISA Flags Exploited Cisco Email Gateway Flaw With Critical Score. Cites a CVE in CISA KEV.
- Wed 14 Oct, 23:29 UTC. SecurityOnline. Cisco Email Gateways Face Active Attacks That Could Expose Cluster SSH Keys. Cites a CVE in CISA KEV.
- Thu 15 Oct, 07:01 UTC. SecurityWeek. Attackers Exploit Critical Cisco Email Gateway Flaw to Gain Root Access. Cites a CVE in CISA KEV.
- Thu 15 Oct, 10:00 UTC. Security Affairs, its first report on the story. Cisco Fixes Actively Exploited Secure Email Gateway Flaw Allowing Root Access. Cites a CVE in CISA KEV.
- Thu 15 Oct, 12:49 UTC. SOCRadar, its first report on the story. Cisco and Palo Alto Patch Exploited Flaws Enabling Root Access. Cites a CVE in CISA KEV.
- Thu 15 Oct, 20:01 UTC. Security Affairs. CISA Flags Exploited Firewall, Email Gateway and Backup Software Flaws. Cites a CVE in CISA KEV.
- Fri 16 Oct, 20:58 UTC. Dark Reading, its first report on the story. China-linked hackers exploited BeyondTrust zero-day to steal credentials. Cites a CVE in CISA KEV.
- Mon 19 Oct, 01:44 UTC. SecurityOnline. Actively Exploited Flaws Hit Cisco, BeyondTrust and WordPress Plugin. Cites a CVE in CISA KEV.
- Known exploited CVE
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Square: official source
- Coverage over time
- Quiet time, folded
Show all 12 articles as a listHide the list
- Thu 3 SepDay 02
- Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities11:11 · SecurityWeek · First report
- Cisco Secure Email S/MIME Flaws Publicly Disclosed17:37 · SecurityOnline
Quiet for 11 days
Tue 15 SepDay 121- Cisco Patches Actively Exploited Flaws in Secure Email Appliances04:41 · SecurityOnline · Picked up again
Quiet for 4 weeks
Wed 14 OctDay 413- Cisco Email Gateway Flaw Exploited to Run Commands as Root19:26 · The Hacker News · Picked up again · Known exploited CVE
- CISA Flags Exploited Cisco Email Gateway Flaw With Critical Score19:33 · CISA · official · CISA alert · Known exploited CVE
- Cisco Email Gateways Face Active Attacks That Could Expose Cluster SSH Keys23:29 · SecurityOnline · Known exploited CVE
- Thu 15 OctDay 424
- Attackers Exploit Critical Cisco Email Gateway Flaw to Gain Root Access07:01 · SecurityWeek · Known exploited CVE
- Cisco Fixes Actively Exploited Secure Email Gateway Flaw Allowing Root Access10:00 · Security Affairs · Known exploited CVE
- Cisco and Palo Alto Patch Exploited Flaws Enabling Root Access12:49 · SOCRadar · Known exploited CVE
- CISA Flags Exploited Firewall, Email Gateway and Backup Software Flaws20:01 · Security Affairs · Known exploited CVE
- Fri 16 OctDay 431
- China-linked hackers exploited BeyondTrust zero-day to steal credentials20:58 · Dark Reading · Known exploited CVE
Quiet for 2 days
Mon 19 OctDay 461- Actively Exploited Flaws Hit Cisco, BeyondTrust and WordPress Plugin01:44 · SecurityOnline · Picked up again · Known exploited CVE
All CVEs in coverage7
Exploited first, then by EPSS
- CVE-2026-76519Exploited
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
9.8Critical2.1% EPSS · 9 articles Cisco Secure Email Gateway Security Hardening Release
9.8Critical0.6% EPSS · 1 articleCisco Secure Email Gateway Security Hardening Release
9.8Critical0.5% EPSS · 1 articleCisco Secure Email Gateway Security Hardening Release
9.8Critical0.5% EPSS · 1 articleCisco Secure Email Gateway Security Hardening Release
7.5High0.5% EPSS · 1 articleCisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty
5.9Medium0.2% EPSS · 2 articlesCisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty
5.9Medium0.2% EPSS · 2 articles