CVE-2026-76440

Cisco Secure Email Gateway Security Hardening Release

Published Sep 14, 2026 CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-76440 are related to path traversal issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-23.

Analysis

Technical impact

The vulnerability is a path traversal flaw that allows an attacker to read or possibly write arbitrary files on the Cisco Secure Email or Secure Email and Web Manager. This weakness can expose sensitive configuration information or enable modification of files that may compromise credentials or other confidential data, and could be leveraged to alter system behavior. The flaw aligns with CWE-23, indicating a failure to properly validate path components, which can compromise confidentiality and integrity but is not explicitly described as enabling remote code execution.

Affected Systems

The affected products are Cisco Secure Email and Cisco Secure Email and Web Manager. No specific version range is documented, implying that all releases lacking the hardening patch are vulnerable.

Risk and Exploitability

The CVSS score of 9.8 categorizes the issue as critical. The EPSS score is < 1% and the vulnerability is not listed in the CISA KEV catalog, yet the severity and potential for damaging file access warrant urgent attention. Based on the description, it is inferred that attackers would likely need remote access to the web‑based administrative interface or API, and may require authenticated credentials to traverse directories, so misconfigured or exposed management ports increase the risk.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cisco

Cisco Secure Email

unknown

Version	Status	Constraints
`14.0.0-698`	affected	—
`13.5.1-277`	affected	—
`13.0.0-392`	affected	—
`14.2.0-620`	affected	—
`13.0.5-007`	affected	—
`13.5.4-038`	affected	—
`14.2.1-020`	affected	—
`14.3.0-032`	affected	—
`15.0.0-104`	affected	—
`15.0.1-030`	affected	—
`15.5.0-048`	affected	—
`15.5.1-055`	affected	—
`15.5.2-018`	affected	—
`16.0.0-050`	affected	—
`15.0.3-002`	affected	—
`16.0.0-054`	affected	—
`15.5.3-022`	affected	—
`16.0.1-017`	affected	—
`15.5.4-012`	affected	—
`16.0.4-016`	affected	—
`15.0.5-016`	affected	—
`16.0.2-112`	affected	—
`16.0.3-044`	affected	—
`15.5.5-014`	affected	—

Cisco

Cisco Secure Email and Web Manager

unknown

Version	Status	Constraints
`13.6.2-023`	affected	—
`13.6.2-078`	affected	—
`13.0.0-249`	affected	—
`13.0.0-277`	affected	—
`13.8.1-052`	affected	—
`13.8.1-068`	affected	—
`13.8.1-074`	affected	—
`14.0.0-404`	affected	—
`12.8.1-002`	affected	—
`14.1.0-227`	affected	—
`13.6.1-201`	affected	—
`14.2.0-203`	affected	—
`14.2.0-212`	affected	—
`12.8.1-021`	affected	—
`13.8.1-108`	affected	—
`14.2.0-224`	affected	—
`14.3.0-120`	affected	—
`15.0.0-334`	affected	—
`15.5.1-024`	affected	—
`15.5.1-029`	affected	—
`15.5.2-005`	affected	—
`16.0.0-195`	affected	—
`15.5.3-017`	affected	—
`16.0.1-010`	affected	—
`15.0.1-035`	affected	—
`16.0.2-088`	affected	—
`15.5.4-007`	affected	—
`15.0.2-007`	affected	—
`16.0.4-010`	affected	—
`16.0.3-016`	affected	—
`16.5.0-429`	affected	—
`15.5.5-006`	affected	—

No data.

Vendor Product Versions

Cisco

Secure Email

Version	Status	Scheme	Platform
`14.0.0-698`	affected	semver	—
`13.5.1-277`	affected	semver	—
`13.0.0-392`	affected	semver	—
`14.2.0-620`	affected	semver	—
`13.0.5-007`	affected	semver	—
`13.5.4-038`	affected	semver	—
`14.2.1-020`	affected	semver	—
`14.3.0-032`	affected	semver	—
`15.0.0-104`	affected	semver	—
`15.0.1-030`	affected	semver	—
`15.5.0-048`	affected	semver	—
`15.5.1-055`	affected	semver	—
`15.5.2-018`	affected	semver	—
`16.0.0-050`	affected	semver	—
`15.0.3-002`	affected	semver	—
`16.0.0-054`	affected	semver	—
`15.5.3-022`	affected	semver	—
`16.0.1-017`	affected	semver	—
`15.5.4-012`	affected	semver	—
`16.0.4-016`	affected	semver	—
`15.0.5-016`	affected	semver	—
`16.0.2-112`	affected	semver	—
`16.0.3-044`	affected	semver	—
`15.5.5-014`	affected	semver	—

Cisco

Secure Email And Web Manager

Version	Status	Scheme	Platform
`13.6.2-023`	affected	semver	—
`13.6.2-078`	affected	semver	—
`13.0.0-249`	affected	semver	—
`13.0.0-277`	affected	semver	—
`13.8.1-052`	affected	semver	—
`13.8.1-068`	affected	semver	—
`13.8.1-074`	affected	semver	—
`14.0.0-404`	affected	semver	—
`12.8.1-002`	affected	semver	—
`14.1.0-227`	affected	semver	—
`13.6.1-201`	affected	semver	—
`14.2.0-203`	affected	semver	—
`14.2.0-212`	affected	semver	—
`12.8.1-021`	affected	semver	—
`13.8.1-108`	affected	semver	—
`14.2.0-224`	affected	semver	—
`14.3.0-120`	affected	semver	—
`15.0.0-334`	affected	semver	—
`15.5.1-024`	affected	semver	—
`15.5.1-029`	affected	semver	—
`15.5.2-005`	affected	semver	—
`16.0.0-195`	affected	semver	—
`15.5.3-017`	affected	semver	—
`16.0.1-010`	affected	semver	—
`15.0.1-035`	affected	semver	—
`16.0.2-088`	affected	semver	—
`15.5.4-007`	affected	semver	—
`15.0.2-007`	affected	semver	—
`16.0.4-010`	affected	semver	—
`16.0.3-016`	affected	semver	—
`16.5.0-429`	affected	semver	—
`15.5.5-006`	affected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the latest Cisco Secure Email and Secure Email and Web Manager update that includes the hardening release for CVE‑2026‑76440.
Restrict external access to the web‑based management console using firewall or proxy rules, allowing only trusted IP addresses to reach administrative ports.
Perform internal path‑traversal testing on the updated system to confirm that the file paths can no longer be manipulated.

Generated by OpenCVE AI on September 21, 2026 at 00:30 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.623% probability within 30 days)

Exploitation none

Automatable yes

Technical Impact total

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm
https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification

History

Sep 17, 2026 9:15 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco secure Email Cisco secure Email And Web Manager
Vendors & Products		Cisco Cisco secure Email Cisco secure Email And Web Manager

Sep 15, 2026 6:30 PM Added references View changes

Type	Values Removed	Values Added
References		https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification

Sep 14, 2026 9:00 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76440 are related to path traversal issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-23.
Title		Cisco Secure Email Gateway Security Hardening Release
Weaknesses		CWE-23
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`