Cisco security advisory (AV26-1042) – Update 1
Cisco says CVE-2026-76519 in Secure Email Gateway is exploited and now on CISA’s KEV list.
The Canadian Centre for Cyber Security updated advisory AV26-1042 on 14 October 2026 for Cisco AsyncOS vulnerabilities in Secure Email Gateway and Secure Email and Web Manager. Affected 15.5 and 16.5 releases need the listed fixes, including Secure Email Gateway 15.5.5-014 and 16.5.0-780. Cisco says CVE-2026-76519, an arbitrary file write in Secure Email Gateway, is being exploited. CISA added CVE-2026-76519 to the Known Exploited Vulnerabilities catalog the same day.
78