Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcriticalExploited in the wild

China-linked APT UAT-9686 is targeting Cisco Secure Email Gateway and Secure Email and Web Manager

Security Affairsby @securityaffairs ()2 min read1 · 1 read
Analyze CVE-2025-20393 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-20393
Improper Input Validation in Cisco Secure Email and Web Appliances Allows Root Commands
10.032%KEV
KEV

From the original article

2 min read at securityaffairs.com

Cisco disclosed a critical zero-day (CVE-2025-20393) in Secure Email Gateway and Secure Email and Web Manager, actively exploited by a China-linked group. Cisco disclosed a critical zero-day, tracked as CVE-2025-20393 , in Secure Email Gateway and Secure Email/Web Manager, which is actively exploited by a China-linked threat group.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.