Cisco Secure Email Gateway Zero-Day Exploited Again

Cisco Secure Email Gateway zero-day CVE-2026-76519: steel inspection box with an envelope in its slot and orange light leaking out

A Cisco Secure Email Gateway zero-day is under attack: one email with a crafted attachment lets an unauthenticated attacker write files and run commands as root. Cisco tracks it as CVE-2026-76519 (CVSS 9.8), and CISA added it to the Known Exploited Vulnerabilities catalog on October 14. It is the second Secure Email Gateway flaw exploited…

Read More

Cisco Secure Email Gateway Vulnerability: Patch Now

A critical Cisco Secure Email Gateway vulnerability lets one crafted email grant root access, no login needed. Active exploitation confirmed.

A critical Cisco Secure Email Gateway vulnerability, CVE-2026-76461 (CVSS 9.8), lets an attacker gain root access to the appliance by sending a single crafted email, no login or admin access required. Cisco confirmed active exploitation and published its advisory September 14; CISA added the flaw to its Known Exploited Vulnerabilities catalog the same day, and…

Read More