CVE-2026-76461 Cisco Cisco Secure Email
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to…
- CVSS
- 9.8 Critical
- EPSS
- 40%
- Percentile
- 99
- Published
- 2026-09-14
- Force
- 11 of 12
- Public PoC
- 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
On CISA’s exploited list
Cisco Secure Email Gateway SQL Injection Vulnerability
- Added
- 2026-09-14
- Federal patch deadline
- 2026-09-17
- Ransomware use
- not known