CVE-2025-20393

CRITICAL 10.0

⚠️ CISA KEV

Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability

CVSS Score

10.0

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to execute arbitrary system commands on an affected device with root privileges. This vulnerability is due to insufficient validation of HTTP requests by the Spam Quarantine feature. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges.

CWE	CWE-20
Vendor	cisco
Product	cisco secure email
Ecosystems	Networking
Industries	NetworkingTelecommunications
Published	Dec 17, 2025
Last Updated	Feb 26, 2026

⚠️ Actively Exploited — Act Now

Get instant alerts for cisco cisco secure email

This vulnerability is actively exploited in the wild. Set up free real-time alerts so you're first to know about threats like CVE-2025-20393.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

Cisco / Cisco Secure Email

14.0.0-698 13.5.1-277 13.0.0-392 14.2.0-620 13.0.5-007 13.5.4-038 14.2.1-020 14.3.0-032 15.0.0-104 15.0.1-030 15.5.0-048 15.5.1-055 15.5.2-018 16.0.0-050 15.0.3-002 16.0.0-054 15.5.3-022 16.0.1-017

Cisco / Cisco Secure Email and Web Manager

13.6.2-023 13.6.2-078 13.0.0-249 13.0.0-277 13.8.1-052 13.8.1-068 13.8.1-074 14.0.0-404 12.8.1-002 14.1.0-227 13.6.1-201 14.2.0-203 14.2.0-212 12.8.1-021 13.8.1-108 14.2.0-224 14.3.0-120 15.0.0-334 15.5.1-024 15.5.1-029 15.5.2-005 16.0.0-195 15.5.3-017 16.0.1-010 15.0.1-035 16.0.2-088

References

NVD ↗ CVE.org ↗ EPSS Data ↗

sec.cloudapps.cisco.com: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sma-attack-N9bf4 cisa.gov: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-20393