Back to list

2025-042 Critical Vulnerability in Cisco Secure Email and Web Manager — CERT-EU-SA2025-042

CERT-EU · CERT-EU · CERT-EU-SA2025-042

ID
CERT-EU-SA2025-042
Date
Activity
Source
CERT-EU
Vendor
CERT-EU
Threat
critical

Summary

On December 17, 2025, Cisco released a security advisory for a critical vulnerability affecting Cisco Secure Email Gateway and Cisco Secure Email and Web Manager products. It is recommended to follow Cisco's recommendations to check whether vulnerable appliances have been compromised, and to remediate the issue. There is no patch available for this vulnerability yet.

Product

Security advisory

What to do

General, cautious steps (verify details in the official source):

  • Prioritize patching or mitigation immediately (treat as actively risky).
  • Identify affected product versions in your inventory and verify whether you are impacted.
  • Apply vendor patches/updates or recommended mitigations as soon as available.
  • Read the official advisory for exact affected versions and remediation steps.

Official advisory

Related advisories