Cisco Warns of Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks
Cisco says attackers are exploiting an unauthenticated root zero-day in Secure Email Gateway.
3
Stories per day · 30 days
4 RSS
Relatedcisco11asyncos9cve-2026-765198email-security4kev4rce4path-traversal3zero-day3active-exploitation2amp2arbitrary-file-write2cisa2root2actively-exploited1cert-eu1cisa-kev1file-reputation1remote-code-execution1
31 stories, newest first · one card per story
Stories tagged #secure-email-gateway
CISA Warns of Cisco Secure Email Gateway Arbitrary File Write Vulnerability (CVE-2026-76519)
CISA says actively exploited Cisco Secure Email Gateway flaw CVE-2026-76519 allows root command execution.
3
Cisco warns of actively exploited Secure Email Gateway flaw
Cisco says attackers are exploiting CVE-2026-76519 in Secure Email Gateway to run root commands via crafted attachments.
4
Cisco Warns of Exploited Secure Email Gateway Vulnerability
Cisco says attackers are exploiting critical unauthenticated CVE-2026-76519 in Secure Email Gateway for root access.
10
2026-017: Critical Vulnerability in Cisco Secure Email Gateway
Actively exploited CVE-2026-76519 lets unauthenticated attackers gain root on Cisco Secure Email Gateway.
4
Cisco make-me-root email bug exploited as a 0-day by unknown crims
Attackers are exploiting Cisco Secure Email Gateway zero-day CVE-2026-76519 for unauthenticated root access via email.
5
Cisco security advisory (AV26-1042) – Update 1
Cisco says CVE-2026-76519 in Secure Email Gateway is exploited and now on CISA’s KEV list.
2
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
Cisco says attackers are exploiting critical Secure Email Gateway flaw CVE-2026-76519 to write files and gain root.
3
Cisco patches new Secure Email Gateway zero-day exploited in attacks
Cisco patched actively exploited Secure Email Gateway zero-day CVE-2026-76519 enabling unauthenticated root execution.
3
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
Cisco Secure Email Gateway flaw lets unauthenticated attackers write files and run root commands via crafted attachments.
CISA lists Cisco email gateway file-write flaw in KEV (CVE-2026-76519)
With file reputation enabled, a crafted email attachment can write files and run root commands; federal action is due October 17.
1
Improving email security outcomes with real-world Microsoft Defender insights
Microsoft's quarterly benchmark claims Defender missed 55.4% fewer high-severity email threats than the next-closest secure email gateway.
CVE-2026-76461: Cisco Email Gateway Flaw Exploited
Cisco confirmed active exploitation of CVE-2026-76461, a critical SQL injection flaw in Secure Email Gateway that enables OS command execution.
2
U.S. CISA adds Cisco Secure Email Gateway flaw to its Known Exploited Vulnerabilities catalog
CISA added actively exploited Cisco Secure Email Gateway zero-day CVE-2026-76461 (CVSS 9.8) to KEV; federal agencies must patch by September 17, 2026.
Critical Cisco Secure Email Gateway zero-day gives attackers root access
Actively exploited Cisco Secure Email Gateway zero-day CVE-2026-76461 lets crafted emails trigger SQL injection and root command execution; CISA added it to KEV.
Cisco email security boxes can be rooted by... an email
Attackers actively exploit critical Cisco Secure Email Gateway flaw CVE-2026-76461, turning a malicious email into unauthenticated root access.
1
Cisco warns customers of actively exploited zero-day in email gateways
Actively exploited Cisco Secure Email Gateway zero-day CVE-2026-76461 allows unauthenticated root command execution; CISA added it to KEV.
CISA Warns of Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks
CISA added actively exploited Cisco Secure Email Gateway SQL injection flaw CVE-2026-76461 to its KEV catalog, enabling unauthenticated root command execution.
Cisco Secure Email Gateway Vulnerability Exploited in Attacks (CVE-2026-76461)
Cisco Secure Email Gateway flaw CVE-2026-76461 enables root command execution via crafted email SQL injection and is actively exploited, added to CISA KEV.
Cisco Warns of Ongoing Exploitation of Critical Email Gateway Zero-Day
Cisco Secure Email Gateway zero-day CVE-2026-76461 (CVSS 9.8) is actively exploited for root command execution; CISA added it to KEV.
CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
Cisco Secure Email Gateway zero-day CVE-2026-76461 (CVSS 9.8) enables unauthenticated root command execution via crafted email; CISA added it to KEV.
Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)
Actively exploited zero-day SQL injection (CVE-2026-76461) in Cisco Secure Email Gateway allows unauthenticated root command execution; CISA ordered federal remediation by September 17.
2
Cisco patches Secure Email Gateway zero-day exploited in attacks
Cisco patches actively exploited Secure Email Gateway zero-day CVE-2026-76461 enabling unauthenticated root command execution; CISA adds it to KEV.
Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution
Cisco warns CVE-2026-76461 in Secure Email Gateway AsyncOS is actively exploited, letting unauthenticated attackers run root commands via crafted emails.