Cisco Confirms Exploitation of AsyncOS Zero-Day by Chinese Hackers

Cisco Confirms Exploitation of AsyncOS Zero-Day by Chinese Hackers

First seen 17 Dec 2025, 19:55 UTC •Blog.TalosintelligenceBleepingcomputerTechcrunchTheregister •77% similarity •37.5

Article Content

Browse articles
ThreatCluster

Cisco has reported an unpatched zero-day vulnerability (CVE-2025-20393) in its AsyncOS software, affecting Secure Email Gateway and Secure Email and Web Manager appliances. The vulnerability is being actively exploited by a Chinese advanced persistent threat actor, identified as UAT-9686, targeting devices with non-standard configurations and the Spam Quarantine feature enabled.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

APT41 Uat-9686 Unc5174 AquaPurge AquaShell AquaTunnel Chisel Cisco Cisco AsyncOS Cisco AsyncOS Software Cisco Secure Email Cisco Secure Email And Web Manager Cisco Secure Email Gateway Secure Email And Web Manager Malware Zero-day Exploit