CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Secure Email Gateway (AsyncOS) SQL Injection to Remote Code Execution (RCE) Vulnerability (CVE-2026-76461)
[Affected Scope] All Cisco Secure Email Gateway appliances running vulnerable versions of Cisco AsyncOS Software.
[Impact] An unauthenticated remote attacker can execute arbitrary commands with root privileges by sending a crafted email, leading to full system compromise.
[Mitigation] Immediately apply the official security patches provided by Cisco and monitor for signs of exploitation.
SonicWall Email Security Arbitrary Admin Account Creation Vulnerability (CVE-2021-20021) Security Advisory
[Affected Scope] On-premises and virtual appliance deployments of SonicWall Email Security running version 10.0.9.x.
[Impact] Unauthenticated remote attackers can create administrative accounts by sending crafted HTTP requests, leading to full system compromise.
[Mitigation] Immediately upgrade to the patched firmware version (10.0.9.6173, 10.0.10, or higher).