AsyncOS

Reported Context (4)

For Cisco Secure Email Gateway, update Content Scanner Tools to 25.3.0.5525 or later or install the applicable fixed AsyncOS release. Cisco Secure Email and PAN-OS Zero-Days Exploited; Fixes Available
Cisco customers should migrate to a patched AsyncOS software release as soon as possible. Cisco Warns of Active Exploitation of Critical Secure Email Gateway Flaw
The fix has been shipping since September 14 in AsyncOS 15.5.5-014 and 16.5.0-780, the builds Cisco listed as fixed in a hardening release that day, which the company now says covered this flaw. It also arrives as a Cisco Warns of Active Exploitation of Critical Secure Email Gateway Flaw
The flaw, tracked as CVE-2026-76461, is a Structured Query Language (SQL) injection vulnerability in Cisco AsyncOS email parsing functionality used by Secure Email Gateway. Cisco Secure Email Gateway Zero-Day Exploited for Root Access

CVE (4)

MITRE ATT&CK (2)

Vendors (2)

Products (11)

Tools (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.