Critical severity9.8CISA KEVNVD Advisory· Published Sep 14, 2026· Updated Sep 15, 2026
CVE-2026-76461
CVE-2026-76461
Description
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.
This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that contains malicious SQL statements through an affected device. A successful exploit could allow the attacker to execute arbitrary SQL statements, leading to command execution with root privileges on the underlying operating system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
2- sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhXnvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
19- Cisco Warns of Exploited Secure Email Gateway VulnerabilitySecurityWeek · Oct 15, 2026
- Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in AttacksCyber Security News · Oct 15, 2026
- Cisco make-me-root email bug exploited as a 0-day by unknown crimsThe Register Security · Oct 14, 2026
- Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway VulnerabilityThe Hacker News · Oct 14, 2026
- 21st September – Threat Intelligence ReportCheck Point Research · Sep 21, 2026
- Week in review: Cisco patches exploited email gateway 0-day, Revolut breachHelp Net Security · Sep 20, 2026
- Cisco alerts customers to second actively exploited zero-day in as many daysCyberScoop · Sep 17, 2026
- Cisco drops another exploited zero-day, this time a perfect 10The Register Security · Sep 17, 2026
- Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active AttacksThe Hacker News · Sep 17, 2026
- Cisco email security boxes can be rooted by... an emailThe Register Security · Sep 15, 2026
- Cisco warns customers of actively exploited zero-day in email gatewaysCyberScoop · Sep 15, 2026
- CISA Warns of Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in AttacksCyber Security News · Sep 15, 2026
- CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the WildRapid7 Blog · Sep 15, 2026
- Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)Help Net Security · Sep 15, 2026
- Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command ExecutionThe Hacker News · Sep 15, 2026
- Root RCE Zero-Day in Cisco Secure Email Gateway Under Active ExploitationSecurityWeek · Sep 15, 2026
- Cisco Secure Email Gateway 0-day Vulnerability Actively Exploited in the Wild to Run Malicious CodeCyber Security News · Sep 15, 2026
- Cisco CVE-2026-76461 Added to CISA KEV Under Active ExploitationVypr Intelligence · Sep 14, 2026
- CISA Adds One Known Exploited Vulnerability to CatalogCISA Alerts