Cisco AsyncOS 0-Day Vulnerability Exploited in the Wild to run System-level Commands

An active campaign exploiting a zero-day vulnerability in Cisco AsyncOS Software, targeting Secure Email Gateway (formerly Email Security Appliance, ESA) and Secure Email and Web Manager (formerly Content Security Management Appliance, SMA). The attack, spotted since late November 2025 and publicly disclosed on December 10, allows attackers to run system-level commands and plant a persistent […]

The post Cisco AsyncOS 0-Day Vulnerability Exploited in the Wild to run System-level Commands appeared first on Cyber Security News.