Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

A critical vulnerability in Cisco Secure Email Gateway, tracked as CVE-2026-76461, is being actively exploited in the wild, allowing unauthenticated remote attackers to execute arbitrary commands with root privileges by sending a specially crafted email containing malicious SQL statements. The flaw exists in the email parsing logic and affects multiple versions of Cisco AsyncOS Software for Secure Email Gateway. Cisco has released patches for affected versions and recommends immediate updates, as no workarounds are available. The U.S. CISA has added the vulnerability to its Known Exploited Vulnerabilities catalog, mandating federal agencies to patch by September 17, 2026.

AI-extracted · verify before operational use