Cisco released fixes for CVE-2025-20393, a CVSS 10.0 zero-day RCE flaw in AsyncOS exploited by a China-linked APT via email security appliances.
Cisco finally patched a maximum-severity AsyncOS zero-day exploited in attacks targeting Secure Email Gateway (SEG) appliances since November 2025.
Cisco confirms zero‑day (CVE‑2025‑20393) in Secure Email appliances exploited by China‑linked actors Attackers deployed Aquashell backdoor, tunneling tools, and log‑clearing utilities for persistence ...
Cisco bug which was actively abused since late November 2025 has finally been addressed.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results