Latest Cisco Secure Email Gateway vulnerability: CVE-2025-20393 #
Cisco has reported a vulnerability in their Secure Email Gateway product. This flaw allows remote, unauthenticated attackers to execute arbitrary code on the vulnerable system. Successful exploitation could allow complete system compromise.
This vulnerability has been assigned CVE-2025-20393 and is rated highly critical has a CVSS score of 10.0.
Note that there is evidence that this vulnerability is being actively exploited in the wild.
The following versions are affected
- All versions of Cisco Secure Email Gateway except Cisco Secure Email Gateway Cloud
What is Cisco Secure Email Gateway? #
Cisco Secure Email Gateway is a secure email security appliance that allows organizations to handle email securely and potentially quarantine malicious or unwanted emails for analysis.
What is the impact? #
Successful exploitation of these vulnerabilities would allow an adversary to execute arbitrary code on the vulnerable host, potentially leading to complete system compromise.
Are updates or workarounds available? #
There is currently no patched fixed version of this product available. The vendor recommends disabling the "Spam Quarantine" feature and isolating potentially vulnerable systems behind network access controls.
How to find potentially vulnerable systems with runZero #
From the Service inventory, use the following query to locate potentially vulnerable assets:
_asset.protocol:=http AND protocol:=http AND last.html.title:"Cisco%Gateway%C" AND NOT last.html.title:"Cloud"
