Cisco patches new Secure Email Gateway zero-day exploited in attacks
Read original article ↗AI Summary
Cisco has patched a new actively exploited zero-day vulnerability, CVE-2026-76519, in its Secure Email Gateway (SEG) product. The flaw is a path traversal vulnerability in the Advanced Malware Protection (AMP) feature that allows unauthenticated remote attackers to execute arbitrary commands with root privileges by sending a maliciously crafted email attachment. The vulnerability affects SEG instances with the File Reputation service enabled and Content Scanner Tools versions earlier than 25.3.0.5525. Cisco has observed active exploitation in the wild and recommends immediate remediation, including software updates, credential renewal, and access control hardening.
AI-extracted · verify before operational use
No entities or IoCs were extracted from this article.