Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-76441 are related to issues with improper access control that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
Published: 2026-09-14
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Unauthorized Access
Action: Immediate Patch
AI Analysis

Impact

The CVE describes a flaw that falls under improper access control (CWE‑284). The advisory notes that this issue relates to improper access control within the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager, but does not provide specific details about how the flaw might be exploited or the precise effects on confidentiality, integrity, or availability.

Affected Systems

The affected systems are Cisco Secure Email Gateway and Cisco Secure Email and Web Manager. The advisory notes that the vulnerabilities were discovered internally and have been patched in recent hardening releases. No specific firmware or software versions are listed, so administrators should consult Cisco’s security knowledge base to determine applicability to their deployments.

Risk and Exploitability

The advisory does not detail an exact exploitation path. The CVSS score of 9.8 indicates a critical severity level. The EPSS score of less than 1% indicates a low but non-zero likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog.

Generated by OpenCVE AI on September 21, 2026 at 00:50 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Obtain and install the Cisco Secure Email Gateway hardening package from the Cisco Security Advisory link.
  • Update the firmware on all Cisco Secure Email Gateway and Cisco Secure Email and Web Manager devices to the hardening version.
  • After updating, restrict management access to trusted IP addresses and enforce least privilege for administrative accounts.

Generated by OpenCVE AI on September 21, 2026 at 00:50 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 15 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
References

Tue, 15 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 15 Sep 2026 08:15:00 +0000

Type Values Removed Values Added
First Time appeared Cisco
Cisco secure Email And Web Manager
Vendors & Products Cisco
Cisco secure Email And Web Manager

Mon, 14 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
Description As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76441 are related to issues with improper access control that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
Title Cisco Secure Email Gateway Security Hardening Release
Weaknesses CWE-284
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Cisco Secure Email And Web Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2026-09-15T17:03:57.836Z

Reserved: 2026-08-19T12:02:03.635Z

Link: CVE-2026-76441

cve-icon Vulnrichment

Updated: 2026-09-15T17:03:57.836Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-14T17:17:50.673

Modified: 2026-09-15T18:19:13.097

Link: CVE-2026-76441

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-21T01:00:08Z

Weaknesses