Threats Tagged 'cve-2026-20354'

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of message integrity. An attacker could exploit these vulnerabilities by using a machine-in-the-middle technique to intercept and modify traffic between email gateways. A successful exploit could allow the attacker to obtain plaintext content from the encrypted communication.

CVE-2026-20212 is a critical vulnerability in Cisco NX-OS Software affecting the Silicon One integration for Cisco Nexus 9000 Series Switches. It allows an unauthenticated remote attacker to execute code with root privileges by connecting to TCP ports 43210 and 43211, which are accessible by default in the Layer 3 VRF. Exploitation can also cause the S1HAL process to crash, potentially leading to device reloads.