– On December 10th 2025 Cisco became aware of a new cyberattack campaign targeting a limited subset of appliances with certain ports open to the internet that are running Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager.
Read MoreCVE numbers CVE-2025-20184 and CVE-2025-20185. Multiple vulnerabilities in Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance could allow an attacker to execute arbitrary commands locally or remotely.
Read MoreCVE numbers CVE-2022-20867 and CVE-2022-20868 Multiple vulnerabilities in the next-generation UI management interface for Cisco Email Security Appliance (ESA), Cisco
Read More
