🔴 Critical: Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution
-
Cisco has issued a warning that a critical vulnerability in AsyncOS Software for Cisco Secure Email Gateway is being actively exploited in the wild.
The flaw, tracked as CVE-2026-76461, carries a CVSS score of 9.8 out of a maximum of 10.0. According to Cisco, the issue stems from insufficient validation in the email parsing logic, which could allow an unauthenticated, remote attacker to exploit the affected system.
Organizations running Cisco Secure Email Gateway with vulnerable AsyncOS versions should treat this as a high-priority patching item given the active exploitation and the maximum-severity CVSS rating. Cisco has published guidance on the vulnerability, and administrators are advised to review the advisory and apply available fixes or mitigations as soon as possible.
- Affected product: Cisco Secure Email Gateway running AsyncOS Software
- Vulnerability type: insufficient validation in email parsing logic
- Attack vector: unauthenticated, remote
- Severity: CVSS 9.8
- Status: actively exploited in the wild
If you manage email security infrastructure, check your exposure now and confirm whether your version is affected before applying the vendor's remediation steps.
Source: The Hacker News
Has your organization already patched this, and if not, what's blocking the update?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login