CVE-2026-20353

Summary

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20353 are related to issues with improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.

Affected Software

VendorProductVersion RangeStatus
CiscoCisco Secure Email14.0.0-698affected
CiscoCisco Secure Email13.5.1-277affected
CiscoCisco Secure Email13.0.0-392affected
CiscoCisco Secure Email14.2.0-620affected
CiscoCisco Secure Email13.0.5-007affected
CiscoCisco Secure Email13.5.4-038affected
CiscoCisco Secure Email14.2.1-020affected
CiscoCisco Secure Email14.3.0-032affected
CiscoCisco Secure Email15.0.0-104affected
CiscoCisco Secure Email15.0.1-030affected
CiscoCisco Secure Email15.5.0-048affected
CiscoCisco Secure Email15.5.1-055affected
CiscoCisco Secure Email15.5.2-018affected
CiscoCisco Secure Email16.0.0-050affected
CiscoCisco Secure Email15.0.3-002affected
CiscoCisco Secure Email16.0.0-054affected
CiscoCisco Secure Email15.5.3-022affected
CiscoCisco Secure Email16.0.1-017affected
CiscoCisco Secure Email15.5.4-012affected
CiscoCisco Secure Email16.0.4-016affected
CiscoCisco Secure Email15.0.5-016affected
CiscoCisco Secure Email16.0.2-112affected
CiscoCisco Secure Email16.0.3-044affected

Weaknesses

  • CWE-664: Improper Control of a Resource Through its Lifetime

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References