CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Secure Email Gateway (AsyncOS) SQL Injection to Remote Code Execution (RCE) Vulnerability (CVE-2026-76461)
[Affected Scope] All Cisco Secure Email Gateway appliances running vulnerable versions of Cisco AsyncOS Software.
[Impact] An unauthenticated remote attacker can execute arbitrary commands with root privileges by sending a crafted email, leading to full system compromise.
[Mitigation] Immediately apply the official security patches provided by Cisco and monitor for signs of exploitation.
Zimbra Collaboration Suite (ZCS) Classic UI Stored XSS Vulnerability Advisory (CVE-2025-66376)
[Affected Scope] Zimbra Collaboration (ZCS) versions before 10.0.18 and 10.1 versions before 10.1.13
[Impact] Attackers can execute arbitrary JavaScript code and steal session tokens in the context of the Classic UI when a user views a malicious HTML email.
[Mitigation] Immediately upgrade Zimbra Collaboration Suite to the patched versions (10.0.18, 10.1.13, or later).