Critical severity9.8NVD Advisory· Published Sep 14, 2026· Updated Sep 15, 2026

CVE-2026-76440

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-76440 are related to path traversal issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-23.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Secure Email Gatewayllm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)
Cisco Systems, Inc./Secure Email And Web Managerllm-fuzzy

Patches

Vulnerability mechanics

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkmnvd

News mentions

Cisco Warns of Exploited Secure Email Gateway Vulnerability
SecurityWeek · Oct 15, 2026
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
The Hacker News · Oct 14, 2026
Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks
The Hacker News · Sep 17, 2026

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000