CVE-2025-20393

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

December 17, 2025

Last Seen

March 4, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Cisco Fixes Critical AsyncOS Vulnerability Under Attack95.8

Cisco has addressed a maximum-severity vulnerability in AsyncOS, tracked as CVE-2025-20393, which has been actively exploited for at least a month. The flaw affects Secure Email Gateway (SEG) and Secure Email and Web Manager (SEWM) appliances, allowing attackers to execute arbitrary commands with ro...

Cisco Addresses AsyncOS Zero-Day Exploited by Threat Actors95.0

Cisco has released fixes for CVE-2025-20393, a zero-day vulnerability in AsyncOS. This vulnerability has been exploited by suspected Chinese threat actors since November 2025, affecting users of Cisco's AsyncOS software.

China-linked APT UAT Exploits Cisco AsyncOS Flaw CVE-2025-2039392.3

Cisco identified a critical zero-day vulnerability, tracked as CVE-2025-20393, in its Secure Email products, which was actively exploited by the China-linked APT group UAT-9686. The flaw, affecting Secure Email Gateway and Email and Web Manager, was assigned a CVSS score of 10.0, indicating maximum...

Cisco Issues Warning for Critical Zero-Day Vulnerability in Unified Communications84.1

Cisco has disclosed a critical zero-day remote code execution vulnerability, CVE-2026-20045, affecting multiple Unified Communications products. This flaw allows unauthenticated attackers to execute arbitrary commands on the underlying operating system, potentially gaining root access. The Cisco Pro...