Cisco Secure Email Gateway SQL Injection Vulnerability

This is a record in the CVE List, the public register of security flaws. CISA added it to its list of flaws known to be used by attackers on 14 Sept 2026. The title and any summary are in the source's own words.

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that co

Kind: Act now
Started: 14 Sept 2026, 17:09
Why we can name the supplier: An official register says it: a CVE record, CISA's list of exploited flaws or the NCSC

Read it at the source

Products it names

Cisco Secure Email (Cisco)

The latest

We aim to update this thread. For the latest, check the supplier's own page directly: www.cve.org/CVERecord?id=CVE-2026-76461.

This entry comes from our research build of public sources made on 24 Oct 2026.