Security · Updated 15 Oct, 12:08 am IST
Cisco patches actively exploited Secure Email Gateway zero-day CVE-2026-76519
Why it matters for readers: It's an example of how a single bug in email scanning software can let attackers gain full control of an appliance and why timely patches matter.
- Cisco warned of active attacks exploiting CVE-2026-76519, a relative path traversal bug in SEG's Advanced Malware Protection that can allow unauthenticated file writes and root command execution.12
- The vulnerability affects SEG instances with the File Reputation service enabled and Content Scanner Tools earlier than 25.3.0.5525.12
- Fixes are available via Content Scanner Tools version 25.3.0.5525 or later and were included in AsyncOS builds released September 14 (AsyncOS 15.5.5-014 and 16.5.0-780).2
- Cisco found the flaw during internal security scanning, became aware of active exploitation in October, and contacted managed Secure Email Cloud customers showing possible compromise indicators.12
Get a brief like this every morning
Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.
Get startedHow this story developed
14 Oct, 10:59 pm · BleepingComputer
Cisco patches new Secure Email Gateway zero-day exploited in attacks
15 Oct, 12:08 am · The Hacker News
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability