Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation
Cisco warns CVE-2026-76461 (CVSS 9.8), an unauthenticated root RCE in Secure Email Gateway AsyncOS, is actively exploited in the wild.
85
Product
Secure Firewall Management Center
- Mentions · 7d0
- Mentions · 30d0
- All mentions5
- First seenSep 9, 2026
- Last mentionedSep 15, 2026
Timeline
5 articles · newest firstU.S. CISA adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog
CISA added actively exploited Cisco FMC, Chrome V8, Fortinet and Citrix NetScaler flaws to its KEV catalog, ordering federal patching by September 12.
84
Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers
Cisco Talos confirms ransomware and state-sponsored groups exploited CVE-2026-20079 and CVE-2026-20316 in Secure Firewall Management Center, deploying Qilin ransomware and Cyclops Blink.
82
Hackers Exploit Critical Cisco Firewall Flaw to Gain Root Access and Deploy Malware
State-sponsored and ransomware actors actively exploit critical Cisco FMC flaws CVE-2026-20079 (CVSS 10.0) and CVE-2026-20316 to gain root access and deploy ransomware.
82
Cisco security advisory (AV26-197) – Update 3
CISA added Cisco CVE-2026-20079 to its KEV catalog; the Canadian Cyber Centre urges updates across Secure Firewall ASA, FTD, FMC, and SCC products.
68
Related CVEs
by mentions- CVE-2026-2007988%10.0Authentication bypass to root access in Cisco Secure Firewall Management Center
- CVE-2026-2031635%5.3Hard-Coded Password Vulnerability in Cisco Secure Firewall Management Center
- CVE-2025-2039332%10.0Improper Input Validation in Cisco Secure Email and Web Appliances Allows Root Commands
- CVE-2026-2013143%10.0Unauthenticated Java Deserialization RCE in Cisco FMC and SCC
- CVE-2026-7646130%9.8Unauthenticated SQL Injection to Root RCE in Cisco Secure Email Gateway
- CVE-2025-252494%9.8Heap-Based Buffer Overflow in Fortinet FortiOS, FortiSwitchManager, and FortiSASE
- CVE-2026-1949033%9.3Remote Authentication Bypass in Citrix NetScaler ADC and NetScaler Gateway
- CVE-2026-874914%8.8Actively Exploited Out-of-Bounds Write in Google Chrome V8
Appears with
- Ciscovendor · 5
- CISAorganization · 4
- UAT-11988threat actor · 2
- Cyclops Blinkmalware · 2
- Qilinthreat actor · 2
- Sandwormthreat actor · 2
- Citrixvendor · 2
- Cisco Talosorganization · 2
- UAT-12197threat actor · 2
- UAT-11823threat actor · 2
- Secure Firewall Threat Defenseproduct · 1
- Fortinetvendor · 1
- Security Cloud Controlproduct · 1
- Cisco Secure Firewall ASAproduct · 1
- NetScaler Gatewayproduct · 1
- AsyncOSproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.