Igorslab.De

Zero-Day Vulnerability in AsyncOS Affects Secure Email Gateway and Web Security Appliances

First seen 20 Dec 2025, 20:59 UTC • •26.7

Article Content

1 / 2

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

A zero-day vulnerability has been identified in the AsyncOS operating system, impacting Secure Email Gateway and Web Security Appliances. These systems serve as central filters for email and web traffic, potentially exposing users to security risks. Details on the exploit and patch status remain limited.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 218d ago How this analysis works

More articles in this cluster (1)

Threat Graph

4 entities, 3 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Zero-day Exploit

Affected Platform (3)

AsyncOS
Secure Email Gateway
Web Security Appliances

Relationships

Zero-day Exploit targets AsyncOS
Zero-day Exploit targets Secure Email Gateway
Zero-day Exploit targets Web Security Appliances

Continue Reading

Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…

CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…