CVE-2026-76442
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76442 are related to issues with improper validation of specified quantity in input that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-1284.
Scoring
- Severity
- HIGH
- CVSS base score
- 7.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS probability
- 0.35%
- CWE
- CWE-1284
- Published
- 2026-09-14
- Last modified
- 2026-09-16
Affected products
- Cisco Cisco Secure Email
- Cisco Cisco Secure Email
- Cisco Cisco Secure Email
- Cisco Cisco Secure Email
- Cisco Cisco Secure Email
- Cisco Cisco Secure Email
- Cisco Cisco Secure Email
- Cisco Cisco Secure Email
Weakness type
Related vulnerabilities
- CVE-2025-9316 — N-central unauthenticated sessionID generation
- CVE-2026-87470 — Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to pote
- CVE-2023-54337 — Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)
- CVE-2026-21485 — iccDEV Undefined Behavior (UB) and Out of Memory in CIccProfile::LoadTag()
- CVE-2025-8320 — Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability
- CVE-2025-15080 — Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in Mitsubishi Electric proprietary protocol communication and SLMP communication for FA products
- CVE-2025-14869 — Improper Validation of Specified Quantity in Input in GitLab
- CVE-2025-8424 — Improper access control on the NetScaler Management Interface