CVE-2026-76519

Reported Context (5)

CVE-2026-76519 affects Cisco Secure Email Gateway and can be exploited remotely without authentication through malicious email attachments. Cisco Secure Email and PAN-OS Zero-Days Exploited; Fixes Available
Tracked as CVE-2026-76519 (CVSS score of 9.8/10), the security defect impacts the Advanced Malware Protection (AMP) feature of the appliance and could allow remote, unauthenticated attackers to write arbitrary files on Cisco Warns of Active Exploitation of Critical Secure Email Gateway Flaw
Cisco found the flaw, tracked as CVE-2026-76519 (CVSS score: 9.8), in its own internal security scanning and became aware of the attacks in October. The advisory does not say how many devices were attacked, who is Cisco Warns of Active Exploitation of Critical Secure Email Gateway Flaw
CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerability CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog
Tracked as CVE-2026-76519, this vulnerability stems from a relative path traversal weakness in SEG's Advanced Malware Protection (AMP) feature, caused by improper handling of email attachments. Cisco patches actively exploited Secure Email Gateway zero-day enabling root command execution

CVE (4)

People (1)

MITRE ATT&CK (5)

Vendors (3)

Products (15)

Tools (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.