CVE-2026-76461: Cisco Email Gateway Flaw Exploited
Cisco confirmed active exploitation of CVE-2026-76461, a critical SQL injection flaw in Secure Email Gateway that enables OS command execution.
Cisco has confirmed that attackers are actively exploiting CVE-2026-76461 in Secure Email Gateway. The critical SQL injection vulnerability can lead to operating-system command execution on affected appliances. Organizations running vulnerable versions should prioritize patching.
- CVE-2026-76461 is a critical SQL injection flaw in Cisco Secure Email Gateway
- Exploitation can escalate to operating-system command execution
- Cisco has confirmed exploitation is occurring in the wild
- Patch affected Secure Email Gateway deployments immediately
- CVEs
- CVE-2026-76461
- Vendors
- Cisco
- Products
- Cisco Secure Email Gateway
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-76461 | Unauthenticated SQL Injection to Root RCE in Cisco Secure Email Gateway | 9.8 | 30% | KEVPoC ×3 | KEV |
From the original article
CVE-2026-76461: Cisco Email Gateway Flaw Exploited Cisco has confirmed active exploitation of CVE-2026-76461 , a critical SQL injection vulnerability in Cisco Secure Email Gateway that can lead to operating-system comman
By ameer · socradar.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.