Cisco AsyncOS 0-Day Vulnerability Exploited in the Wild to run System

Cybersecuritynews •Guru Baran • December 18, 2025

An active campaign exploiting a zero-day vulnerability in Cisco AsyncOS Software, targeting Secure Email Gateway (formerly Email Security Appliance, ESA) and Secure Email and Web Manager (formerly Content Security Management Appliance, SMA). The attack, spotted since late November 2025 and publicly disclosed on December 10, allows attackers to run system-level commands and plant a persistent […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cisco AsyncOS Zero-Day Exploited by Chinese APT Group A zero-day vulnerability in Cisco AsyncOS Software has been actively exploited since late November 2025. The attack targets Secure Email Gateway and Secure Email and Web Manager, allowing attackers to execute system-level commands. The campaign is attributed to the UAT-9686 group, assessed to have a Chinese nexus. 2 sources 94

Cisco AsyncOS 0-Day Vulnerability Exploited in the Wild to run System

The full story

Extracted Entities

Attack Types (1)

Platforms (3)