Search — “CVE-2026-76461”

Cisco warned that CVE-2026-76519 (CVSS 9.8) in Secure Email Gateway is being exploited; an unauthenticated sender using a crafted email attachment can write files to the appliance OS and potentially run commands as root. Only gateways with File Reputation enabled on a mail policy and Content Scanner Tools older than 25.3.0.5525 are vulnerable, and Cisco has contacted managed Secure Email Cloud customers showing possible compromise indicators. Hunters should run the published 'grep "System Security" system_logs' check, review firewall logs for uploads to external IPs or downloads from malicious ones, and verify the scanner version with contentscannerstatus.