A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute…

A crafted email gives an unauthenticated attacker root through SQL injection in AsyncOS (CVSS 9.8). Cisco has known of attacks since September and replaced the 15.5.5-014 fix on 31 October after…

TL;DR Cisco disclosed CVE-2026-76519, a critical arbitrary file write flaw in the Cisco Secure Email Gateway. Attackers are actively exploiting this flaw in the wild. Rated 9.8 on the CVSS 3.1 scale, this Cisco Secure Email Gateway vulnerability lets unauthenticated remote attackers execute commands with root privileges. Therefore, administrators must update the Content Scanner Tools package. Alternatively, teams can upgrade Cisco AsyncOS Software immediately.

Cisco says attackers are exploiting CVE-2026-76519 in certain Secure Email Gateway configurations to write files and potentially run commands as root. It…

Cisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that threat actors have been exploiting in attacks.

Cisco says CVE-2026-76461 is under active exploitation and can enable root command execution on Secure Email Gateway.

An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges.

Cisco says CVE-2026-76461 is under active exploitation and can enable root command execution on Secure Email Gateway.

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email pa

To achieve the complete subjugation of a Cisco mail gateway, an attacker now requires only a single, meticulously crafted email. The critical vulnerability designated as CVE-2026-76461 is actively weaponized in real-world attacks. Terrifyingly, it permits unauthenticated, remote actors to execute arbitrary commands possessing absolute root privileges. The Mechanics of the SQL Injection Attack The fundamental flaw resides within the email parsing engine of Cisco AsyncOS, specifically designed for the Secure Email Gateway.

Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-76461, carries a CVSS score of 9.8 out of a maximum of 10.0. It has been described as a case of insufficient validation in the email parsing logic that could allow an unauthenticated, remote attacker

Am Abend des 14. September 2026 veröffentlichte der Netzwerkausrüster Cisco ein Advisory über eine Schwachstelle in seinem Produkt Secure Email Gateway. Demnach liegt mit CVE-2026-76461 eine Verwundbarkeit im E-Mail Parsing von AsyncOS for Cisco Secure Email Gateway vor, die es Angreifern aufgrun...