Cisco AsyncOS

Reported Context (8)

CVE-2026-76519 affects physical and virtual Cisco Secure Email Gateway appliances running vulnerable Cisco AsyncOS releases when two specific conditions are present: the File Reputation service is enabled and assigned Cisco Patches Actively Exploited Secure Email Gateway Flaw Enabling Root Access
Cisco disclosed CVE-2026-76461 (9.8 CVSS) on September 14, 2026, a SQL injection flaw in the email parsing logic of Cisco AsyncOS Software for Cisco Secure Email Gateway. 10 RCE Vulnerabilities Defenders Should Prioritize, Including Exploited Zero-Days
customers to patch a new actively exploited SEG zero-day (CVE-2026-76461) in the email parsing of Cisco AsyncOS Software that also lets unauthenticated, remote attackers execute arbitrary commands with root privileges Cisco patches actively exploited Secure Email Gateway zero-day enabling root command execution
Cisco said its product security incident response team became aware of active exploitation of the defect affecting Cisco AsyncOS Software for Cisco Secure Email Gateway in September. Cisco Zero-Day in Secure Email Gateway Exploited for Root Access
a security advisory for CVE-2026-76461, a critical SQL injection vulnerability affecting Cisco AsyncOS Software for Cisco Secure Email Gateway. The vulnerability has a reported CVSS v3.1 base score of 9.8 and Critical Cisco Email Gateway Flaw Exploited in the Wild; Patch Immediately

CVE (14)

People (8)

MITRE ATT&CK (7)

Vendors (8)

Products (14)

Tools (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.