Cisco Warns of Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks
Cisco says attackers are exploiting an unauthenticated root zero-day in Secure Email Gateway.
3
Stories per day · 30 days
2 RSS
Relatedcisco10cve-2026-765199secure-email-gateway9rce4active-exploitation3kev3root3zero-day3cisa2email-security2path-traversal2actively-exploited1amp1arbitrary-file-write1cert-eu1cisa-kev1email-gateway1file-reputation1
26 stories, newest first · one card per story
Stories tagged #asyncos
CISA Warns of Cisco Secure Email Gateway Arbitrary File Write Vulnerability (CVE-2026-76519)
CISA says actively exploited Cisco Secure Email Gateway flaw CVE-2026-76519 allows root command execution.
3
Cisco warns of actively exploited Secure Email Gateway flaw
Cisco says attackers are exploiting CVE-2026-76519 in Secure Email Gateway to run root commands via crafted attachments.
4
Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise
Cisco says attackers are exploiting CVE-2026-76519 in Secure Email Gateway to write files and run commands as root.
3
Cisco Warns of Exploited Secure Email Gateway Vulnerability
Cisco says attackers are exploiting critical unauthenticated CVE-2026-76519 in Secure Email Gateway for root access.
10
2026-017: Critical Vulnerability in Cisco Secure Email Gateway
Actively exploited CVE-2026-76519 lets unauthenticated attackers gain root on Cisco Secure Email Gateway.
4
Cisco make-me-root email bug exploited as a 0-day by unknown crims
Attackers are exploiting Cisco Secure Email Gateway zero-day CVE-2026-76519 for unauthenticated root access via email.
5
Cisco security advisory (AV26-1042) – Update 1
Cisco says CVE-2026-76519 in Secure Email Gateway is exploited and now on CISA’s KEV list.
2
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Cisco says attackers are exploiting critical Secure Email Gateway flaw CVE-2026-76519 to write files and gain root.
3
Cisco patches new Secure Email Gateway zero-day exploited in attacks
Cisco patched actively exploited Secure Email Gateway zero-day CVE-2026-76519 enabling unauthenticated root execution.
3
U.S. CISA adds Cisco Secure Email Gateway flaw to its Known Exploited Vulnerabilities catalog
CISA added actively exploited Cisco Secure Email Gateway zero-day CVE-2026-76461 (CVSS 9.8) to KEV; federal agencies must patch by September 17, 2026.
Critical Cisco Secure Email Gateway zero-day gives attackers root access
Actively exploited Cisco Secure Email Gateway zero-day CVE-2026-76461 lets crafted emails trigger SQL injection and root command execution; CISA added it to KEV.
Cisco email security boxes can be rooted by... an email
Attackers actively exploit critical Cisco Secure Email Gateway flaw CVE-2026-76461, turning a malicious email into unauthenticated root access.
1
Cisco warns customers of actively exploited zero-day in email gateways
Actively exploited Cisco Secure Email Gateway zero-day CVE-2026-76461 allows unauthenticated root command execution; CISA added it to KEV.
CISA Warns of Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks
CISA added actively exploited Cisco Secure Email Gateway SQL injection flaw CVE-2026-76461 to its KEV catalog, enabling unauthenticated root command execution.
Cisco Warns of Ongoing Exploitation of Critical Email Gateway Zero-Day
Cisco Secure Email Gateway zero-day CVE-2026-76461 (CVSS 9.8) is actively exploited for root command execution; CISA added it to KEV.
CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Cisco Secure Email Gateway zero-day CVE-2026-76461 (CVSS 9.8) enables unauthenticated root command execution via crafted email; CISA added it to KEV.
Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)
Actively exploited zero-day SQL injection (CVE-2026-76461) in Cisco Secure Email Gateway allows unauthenticated root command execution; CISA ordered federal remediation by September 17.
2
Cisco patches Secure Email Gateway zero-day exploited in attacks
Cisco patches actively exploited Secure Email Gateway zero-day CVE-2026-76461 enabling unauthenticated root command execution; CISA adds it to KEV.
Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution
Cisco warns CVE-2026-76461 in Secure Email Gateway AsyncOS is actively exploited, letting unauthenticated attackers run root commands via crafted emails.
Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation
Cisco warns CVE-2026-76461 (CVSS 9.8), an unauthenticated root RCE in Secure Email Gateway AsyncOS, is actively exploited in the wild.
Hackers Exploit Critical Cisco Secure Email Gateway Flaw to Execute Commands as Root
Cisco patched critical unauthenticated SQL injection CVE-2026-76461 (CVSS 9.8) in Secure Email Gateway enabling root command execution, with malicious activity already detected.
Hackers Exploit Critical Cisco Secure Email Gateway Vulnerability in the Wild to Run Malicious Code
Cisco warns attackers actively exploit zero-day CVE-2026-76461 in Secure Email Gateway, gaining unauthenticated root command execution via crafted emails.
Cisco security advisory (AV26-921)
Canadian Cyber Centre warns actively exploited Cisco Secure Email Gateway SQL injection CVE-2026-76461 was added to CISA's KEV database.