[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-20353":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-15T20:02:04.971Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":439,"aliases":440,"duplicate_of":9,"upstream":441,"downstream":442,"duplicates":443,"related":444,"reserved_at":9,"published_at":445,"modified_at":446,"state":447,"summary":448,"references_raw":457,"kevs":467,"epss":468,"epss_history":471,"metrics":473,"affected":480},"CVE-2026-20353","As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-20353 are related to issues with improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-664","Improper Control of a Resource Through its Lifetime","The product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.","weakness","Draft","Pillar",[19,159,292,431,435],{"id":20,"name":21,"techniques":22},"CAPEC-196","Session Credential Falsification through Forging",[23,95,133],{"id":24,"name":25,"tactics":26,"countermeasures":36},"T1134.002","Create Process with Token",[27,30,33],{"id":28,"name":29},"TA0030","Defense Evasion",{"id":31,"name":32},"TA0005","Stealth",{"id":34,"name":35},"TA0111","Privilege Escalation",[37,42,47,52,57,61,65,69,73,77,82,87,91],{"id":38,"name":39,"tactic":40},"D3-AEM","Application Exception Monitoring",{"name":41},"Detect",{"id":43,"name":44,"tactic":45},"D3-RIC","Reissue Credential",{"name":46},"Restore",{"id":48,"name":49,"tactic":50},"D3-CH","Credential Hardening",{"name":51},"Harden",{"id":53,"name":54,"tactic":55},"D3-CR","Credential Revocation",{"name":56},"Evict",{"id":58,"name":59,"tactic":60},"D3-MFA","Multi-factor Authentication",{"name":51},{"id":62,"name":63,"tactic":64},"D3-CCSA","Credential Compromise Scope Analysis",{"name":41},{"id":66,"name":67,"tactic":68},"D3-OPM","Operational Process Monitoring",{"name":41},{"id":70,"name":71,"tactic":72},"D3-CRO","Credential Rotation",{"name":51},{"id":74,"name":75,"tactic":76},"D3-ANCI","Authentication Cache Invalidation",{"name":56},{"id":78,"name":79,"tactic":80},"D3-CTS","Credential Transmission Scoping",{"name":81},"Isolate",{"id":83,"name":84,"tactic":85},"D3-DUC","Decoy User Credential",{"name":86},"Deceive",{"id":88,"name":89,"tactic":90},"D3-TB","Token Binding",{"name":51},{"id":92,"name":93,"tactic":94},"D3-TBA","Token-based Authentication",{"name":51},{"id":96,"name":97,"tactics":98,"countermeasures":102},"T1134.003","Make and Impersonate Token",[99,100,101],{"id":28,"name":29},{"id":31,"name":32},{"id":34,"name":35},[103,105,107,111,113,115,117,119,121,123,125,127,129,131],{"id":58,"name":59,"tactic":104},{"name":51},{"id":43,"name":44,"tactic":106},{"name":46},{"id":108,"name":109,"tactic":110},"D3-ST","Session Termination",{"name":56},{"id":38,"name":39,"tactic":112},{"name":41},{"id":66,"name":67,"tactic":114},{"name":41},{"id":88,"name":89,"tactic":116},{"name":51},{"id":92,"name":93,"tactic":118},{"name":51},{"id":74,"name":75,"tactic":120},{"name":56},{"id":53,"name":54,"tactic":122},{"name":56},{"id":83,"name":84,"tactic":124},{"name":86},{"id":78,"name":79,"tactic":126},{"name":81},{"id":48,"name":49,"tactic":128},{"name":51},{"id":70,"name":71,"tactic":130},{"name":51},{"id":62,"name":63,"tactic":132},{"name":41},{"id":134,"name":135,"tactics":136,"countermeasures":140},"T1606","Forge Web Credentials",[137],{"id":138,"name":139},"TA0031","Credential Access",[141,143,145,147,149,151,153,155,157],{"id":48,"name":49,"tactic":142},{"name":51},{"id":74,"name":75,"tactic":144},{"name":56},{"id":70,"name":71,"tactic":146},{"name":51},{"id":58,"name":59,"tactic":148},{"name":51},{"id":83,"name":84,"tactic":150},{"name":86},{"id":53,"name":54,"tactic":152},{"name":56},{"id":62,"name":63,"tactic":154},{"name":41},{"id":43,"name":44,"tactic":156},{"name":46},{"id":78,"name":79,"tactic":158},{"name":81},{"id":160,"name":161,"techniques":162},"CAPEC-21","Exploitation of Trusted Identifiers",[163,240,268],{"id":164,"name":165,"tactics":166,"countermeasures":170},"T1134","Access Token Manipulation",[167,168,169],{"id":28,"name":29},{"id":31,"name":32},{"id":34,"name":35},[171,173,175,177,181,183,188,190,192,194,198,200,202,204,208,210,212,216,218,220,224,228,232,236],{"id":78,"name":79,"tactic":172},{"name":81},{"id":62,"name":63,"tactic":174},{"name":41},{"id":66,"name":67,"tactic":176},{"name":41},{"id":178,"name":179,"tactic":180},"D3-PSA","Process Spawn Analysis",{"name":41},{"id":108,"name":109,"tactic":182},{"name":56},{"id":184,"name":185,"tactic":186},"D3-NTPM","Network Traffic Policy Mapping",{"name":187},"Model",{"id":53,"name":54,"tactic":189},{"name":56},{"id":74,"name":75,"tactic":191},{"name":56},{"id":83,"name":84,"tactic":193},{"name":86},{"id":195,"name":196,"tactic":197},"D3-AM","Access Modeling",{"name":187},{"id":48,"name":49,"tactic":199},{"name":51},{"id":58,"name":59,"tactic":201},{"name":51},{"id":70,"name":71,"tactic":203},{"name":51},{"id":205,"name":206,"tactic":207},"D3-HBPI","Hardware-based Process Isolation",{"name":81},{"id":88,"name":89,"tactic":209},{"name":51},{"id":92,"name":93,"tactic":211},{"name":51},{"id":213,"name":214,"tactic":215},"D3-RC","Restore Configuration",{"name":46},{"id":38,"name":39,"tactic":217},{"name":41},{"id":43,"name":44,"tactic":219},{"name":46},{"id":221,"name":222,"tactic":223},"D3-CI","Configuration Inventory",{"name":187},{"id":225,"name":226,"tactic":227},"D3-SCA","System Call Analysis",{"name":41},{"id":229,"name":230,"tactic":231},"D3-SCF","System Call Filtering",{"name":81},{"id":233,"name":234,"tactic":235},"D3-EAL","Executable Allowlisting",{"name":81},{"id":237,"name":238,"tactic":239},"D3-EDL","Executable Denylisting",{"name":81},{"id":241,"name":242,"tactics":243,"countermeasures":245},"T1528","Steal Application Access Token",[244],{"id":138,"name":139},[246,248,250,252,254,256,258,260,262,264,266],{"id":48,"name":49,"tactic":247},{"name":51},{"id":43,"name":44,"tactic":249},{"name":46},{"id":74,"name":75,"tactic":251},{"name":56},{"id":88,"name":89,"tactic":253},{"name":51},{"id":78,"name":79,"tactic":255},{"name":81},{"id":58,"name":59,"tactic":257},{"name":51},{"id":53,"name":54,"tactic":259},{"name":56},{"id":92,"name":93,"tactic":261},{"name":51},{"id":62,"name":63,"tactic":263},{"name":41},{"id":70,"name":71,"tactic":265},{"name":51},{"id":83,"name":84,"tactic":267},{"name":86},{"id":269,"name":270,"tactics":271,"countermeasures":273},"T1539","Steal Web Session Cookie",[272],{"id":138,"name":139},[274,276,278,280,282,284,286,288,290],{"id":78,"name":79,"tactic":275},{"name":81},{"id":83,"name":84,"tactic":277},{"name":86},{"id":48,"name":49,"tactic":279},{"name":51},{"id":58,"name":59,"tactic":281},{"name":51},{"id":74,"name":75,"tactic":283},{"name":56},{"id":62,"name":63,"tactic":285},{"name":41},{"id":70,"name":71,"tactic":287},{"name":51},{"id":53,"name":54,"tactic":289},{"name":56},{"id":43,"name":44,"tactic":291},{"name":46},{"id":293,"name":294,"techniques":295},"CAPEC-60","Reusing Session IDs (aka Session Replay)",[296,326],{"id":297,"name":298,"tactics":299,"countermeasures":303},"T1134.001","Token Impersonation/Theft",[300,301,302],{"id":28,"name":29},{"id":31,"name":32},{"id":34,"name":35},[304,306,308,310,312,314,316,318,320,322,324],{"id":53,"name":54,"tactic":305},{"name":56},{"id":62,"name":63,"tactic":307},{"name":41},{"id":78,"name":79,"tactic":309},{"name":81},{"id":74,"name":75,"tactic":311},{"name":56},{"id":88,"name":89,"tactic":313},{"name":51},{"id":92,"name":93,"tactic":315},{"name":51},{"id":83,"name":84,"tactic":317},{"name":86},{"id":48,"name":49,"tactic":319},{"name":51},{"id":70,"name":71,"tactic":321},{"name":51},{"id":58,"name":59,"tactic":323},{"name":51},{"id":43,"name":44,"tactic":325},{"name":46},{"id":327,"name":328,"tactics":329,"countermeasures":334},"T1550.004","Web Session Cookie",[330,331],{"id":28,"name":29},{"id":332,"name":333},"TA0109","Lateral Movement",[335,337,339,341,343,347,351,355,359,361,363,367,371,375,379,381,385,387,391,393,397,401,403,405,409,413,417,419,423,427],{"id":70,"name":71,"tactic":336},{"name":51},{"id":229,"name":230,"tactic":338},{"name":81},{"id":43,"name":44,"tactic":340},{"name":46},{"id":78,"name":79,"tactic":342},{"name":81},{"id":344,"name":345,"tactic":346},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":41},{"id":348,"name":349,"tactic":350},"D3-APCA","Application Protocol Command Analysis",{"name":41},{"id":352,"name":353,"tactic":354},"D3-PSMD","Process Self-Modification Detection",{"name":41},{"id":356,"name":357,"tactic":358},"D3-RTSD","Remote Terminal Session Detection",{"name":41},{"id":178,"name":179,"tactic":360},{"name":41},{"id":205,"name":206,"tactic":362},{"name":81},{"id":364,"name":365,"tactic":366},"D3-KBPI","Kernel-based Process Isolation",{"name":81},{"id":368,"name":369,"tactic":370},"D3-ABPI","Application-based Process Isolation",{"name":81},{"id":372,"name":373,"tactic":374},"D3-HS","Host Shutdown",{"name":56},{"id":376,"name":377,"tactic":378},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":41},{"id":53,"name":54,"tactic":380},{"name":56},{"id":382,"name":383,"tactic":384},"D3-HR","Host Reboot",{"name":56},{"id":62,"name":63,"tactic":386},{"name":41},{"id":388,"name":389,"tactic":390},"D3-NTF","Network Traffic Filtering",{"name":81},{"id":83,"name":84,"tactic":392},{"name":86},{"id":394,"name":395,"tactic":396},"D3-CSPP","Client-server Payload Profiling",{"name":41},{"id":398,"name":399,"tactic":400},"D3-PT","Process Termination",{"name":56},{"id":48,"name":49,"tactic":402},{"name":51},{"id":58,"name":59,"tactic":404},{"name":51},{"id":406,"name":407,"tactic":408},"D3-PLA","Process Lineage Analysis",{"name":41},{"id":410,"name":411,"tactic":412},"D3-NTCD","Network Traffic Community Deviation",{"name":41},{"id":414,"name":415,"tactic":416},"D3-PS","Process Suspension",{"name":56},{"id":74,"name":75,"tactic":418},{"name":56},{"id":420,"name":421,"tactic":422},"D3-NTSA","Network Traffic Signature Analysis",{"name":41},{"id":424,"name":425,"tactic":426},"D3-WSAM","Web Session Access Mediation",{"name":81},{"id":428,"name":429,"tactic":430},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":41},{"id":432,"name":433,"techniques":434},"CAPEC-61","Session Fixation",[],{"id":436,"name":437,"techniques":438},"CAPEC-62","Cross Site Request Forgery",[],[],[],[],[],[],[],"2026-09-14T16:08:50.062Z","2026-09-15T17:03:57.940Z","Awaiting Analysis",{"cisa_kev":449,"cisa_ransomware":449,"cisa_vendor":9,"epss_severity":450,"epss_score":451,"severity":452,"severity_score":453,"severity_version":454,"severity_source":455,"severity_vector":456,"severity_status":447},false,"low",0.00373,"critical",9.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[458,463],{"url":459,"sources":460,"tags":462},"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm",[455,461],"nvd",[],{"url":464,"sources":465,"tags":466},"https://www.cve.org/Media/News/item/blog/2026/06/16/Preserving-Vulnerability-Level-Identification",[455,461],[],[],{"date":469,"score":451,"percentile":470},"2026-09-15",0.30856,[472],{"date":469,"score":451,"percentile":470},[474,478],{"source":455,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":475,"cvss_v4_0":9},{"baseScore":453,"baseSeverity":476,"vectorString":456,"impactScore":453,"exploitabilityScore":477},"CRITICAL",10,{"source":461,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":479,"cvss_v4_0":9},{"baseScore":453,"baseSeverity":476,"vectorString":456,"impactScore":453,"exploitabilityScore":477},[481],{"ecosystem":9,"name":482,"vendor":483,"product":484,"cpe_part":485,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":486},"Cisco Secure Email","cisco","cisco secure email","a",[487,490,492,494,496,498,500,502,504,506,508,510,512,514,516,518,520,522,524,526,528,530,532],{"version":488,"is_range":449,"range_type":455,"version_start":488,"version_start_type":489,"version_end":488,"version_end_type":489,"fixed_in":9},"14.0.0-698","including",{"version":491,"is_range":449,"range_type":455,"version_start":491,"version_start_type":489,"version_end":491,"version_end_type":489,"fixed_in":9},"13.5.1-277",{"version":493,"is_range":449,"range_type":455,"version_start":493,"version_start_type":489,"version_end":493,"version_end_type":489,"fixed_in":9},"13.0.0-392",{"version":495,"is_range":449,"range_type":455,"version_start":495,"version_start_type":489,"version_end":495,"version_end_type":489,"fixed_in":9},"14.2.0-620",{"version":497,"is_range":449,"range_type":455,"version_start":497,"version_start_type":489,"version_end":497,"version_end_type":489,"fixed_in":9},"13.0.5-007",{"version":499,"is_range":449,"range_type":455,"version_start":499,"version_start_type":489,"version_end":499,"version_end_type":489,"fixed_in":9},"13.5.4-038",{"version":501,"is_range":449,"range_type":455,"version_start":501,"version_start_type":489,"version_end":501,"version_end_type":489,"fixed_in":9},"14.2.1-020",{"version":503,"is_range":449,"range_type":455,"version_start":503,"version_start_type":489,"version_end":503,"version_end_type":489,"fixed_in":9},"14.3.0-032",{"version":505,"is_range":449,"range_type":455,"version_start":505,"version_start_type":489,"version_end":505,"version_end_type":489,"fixed_in":9},"15.0.0-104",{"version":507,"is_range":449,"range_type":455,"version_start":507,"version_start_type":489,"version_end":507,"version_end_type":489,"fixed_in":9},"15.0.1-030",{"version":509,"is_range":449,"range_type":455,"version_start":509,"version_start_type":489,"version_end":509,"version_end_type":489,"fixed_in":9},"15.5.0-048",{"version":511,"is_range":449,"range_type":455,"version_start":511,"version_start_type":489,"version_end":511,"version_end_type":489,"fixed_in":9},"15.5.1-055",{"version":513,"is_range":449,"range_type":455,"version_start":513,"version_start_type":489,"version_end":513,"version_end_type":489,"fixed_in":9},"15.5.2-018",{"version":515,"is_range":449,"range_type":455,"version_start":515,"version_start_type":489,"version_end":515,"version_end_type":489,"fixed_in":9},"16.0.0-050",{"version":517,"is_range":449,"range_type":455,"version_start":517,"version_start_type":489,"version_end":517,"version_end_type":489,"fixed_in":9},"15.0.3-002",{"version":519,"is_range":449,"range_type":455,"version_start":519,"version_start_type":489,"version_end":519,"version_end_type":489,"fixed_in":9},"16.0.0-054",{"version":521,"is_range":449,"range_type":455,"version_start":521,"version_start_type":489,"version_end":521,"version_end_type":489,"fixed_in":9},"15.5.3-022",{"version":523,"is_range":449,"range_type":455,"version_start":523,"version_start_type":489,"version_end":523,"version_end_type":489,"fixed_in":9},"16.0.1-017",{"version":525,"is_range":449,"range_type":455,"version_start":525,"version_start_type":489,"version_end":525,"version_end_type":489,"fixed_in":9},"15.5.4-012",{"version":527,"is_range":449,"range_type":455,"version_start":527,"version_start_type":489,"version_end":527,"version_end_type":489,"fixed_in":9},"16.0.4-016",{"version":529,"is_range":449,"range_type":455,"version_start":529,"version_start_type":489,"version_end":529,"version_end_type":489,"fixed_in":9},"15.0.5-016",{"version":531,"is_range":449,"range_type":455,"version_start":531,"version_start_type":489,"version_end":531,"version_end_type":489,"fixed_in":9},"16.0.2-112",{"version":533,"is_range":449,"range_type":455,"version_start":533,"version_start_type":489,"version_end":533,"version_end_type":489,"fixed_in":9},"16.0.3-044"]