Techradar

Cisco Patches Critical RCE Flaw Exploited by Hackers

First seen 18 Jan 2026, 21:04 UTC • Techradar

•32.7

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Cisco has released a patch for a critical remote code execution vulnerability (CVE-2025-20393) affecting its Secure Email appliances. This flaw was actively exploited by Chinese state-sponsored groups for several weeks using a tool named Aquashell. The patch also addresses persistence mechanisms that may have been installed during the exploitation.

How this analysis works

Attack Flow

Continue Reading

Cisco Fixes Critical AsyncOS Vulnerability Under Attack Cisco Email Security Products Targeted in Zero-Day Campaign by China-Linked Actors Cisco ASA Zero-Day Exploited in State-Espionage Campaign Cisco Confirms Exploitation of AsyncOS Zero-Day by Chinese Hackers

Cisco Patches Critical RCE Flaw Exploited by Hackers

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading