Cisco patches new Secure Email Gateway zero-day exploited in attacks

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.8.

Tahle CVE jsem vytáhl z širšího textu článku: CVE-2024-20401, CVE-2025-20393, CVE-2026-76461. Neukazuju u nich proto fakta z katalogů výše, a to preventivně, protože článek se na ně mohl jen odkazovat, třeba jako na starší kauzu.

Jak se o tom psalo 8

1. 15. 10. 2026 11:21 · CERT.at AT

   Kritische Sicherheitslücke in Cisco Secure Email Gateway - aktiv ausgenutzt - Updates verfügbar - CVE-2026-76519

   15. Oktober 2026 Beschreibung In der Funktion Advanced Malware Protection (AMP) von Cisco Secure Email Gateway existiert eine kritische Sicherheitslücke. Die Schwachstelle beruht auf einer fehlerhaften Verarbeitung von E-Mail-Anhängen, wenn der File-Reputation-Dienst aktiviert ist. Laut Cisco wird die Sicherheitslücke bereits aktiv ausgenutzt. CVE-Nummer(n): CVE-2026-76519 CVSS Base Score: 9.8 Auswirkungen Nicht authentifizierte Angreifer:innen können aus der Ferne durch das Versenden einer E…

2. 15. 10. 2026 09:30 · CSIRT Itálie (ACN) IT

   Cisco: rilevato sfruttamento in rete della CVE-2026-76519 relativa a Secure Email Gateway

   Cisco ha rilevato lo sfruttamento in rete di una vulnerabilità critica, identificata tramite la CVE-2026-76519, in Advanced Malware Protection di Cisco Secure Email Gateway, soluzione per la protezione e la gestione della posta elettronica.

3. 15. 10. 2026 · zachyceno 04:00 · NCSC-FI FI

   Cisco Secure Email Gateway Arbitrary File Write Vulnerability

   Classification: Critical, Solution: Official Fix, Exploit Maturity: Functional, CVSSv3.1: 9.8, CVEs: CVE-2026-76519, Summary: A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending…

4. 14. 10. 2026 21:23 · Cyber Centre Kanada CA

   Cisco security advisory (AV26-1042)

   Serial number: AV26-1042 Date: October 14, 2026 As of October 14, 2026, Cisco is affected by a vulnerability in the following products: Cisco AsyncOS Software for Cisco Secure Email Gateway Release 15.5 version prior to 15.5.5-014 16.5 versions prior to 16.5.0-780 Cisco Secure Email and Web Manager Release 15.5 version prior to 15.5.5-006 16.5 versions prior to 16.5.0-429 Cisco has indicated that CVE-2026-76519 is being exploited in the wild. The Cyber Centre encourages users and administrators…

5. 14. 10. 2026 20:46 · NCSC-NL NL

   NCSC-2026-0429 [1.00] [H/H] Kwetsbaarheid verholpen in Cisco Secure Email Gateway

   Cisco heeft een kwetsbaarheid verholpen in Cisco Secure Email Gateway, specifiek in de Advanced Malware Protection feature. De kwetsbaarheid bevindt zich in de wijze waarop de Advanced Malware Protection feature e-mailbijlagen verwerkt wanneer de file reputation service is ingeschakeld. Een niet-geauthenticeerde externe aanvaller kan hierdoor willekeurige bestanden schrijven naar het onderliggende besturingssysteem. Misbruik van deze kwetsbaarheid kan leiden tot het uitvoeren van commando's met…

6. 14. 10. 2026 19:29 · BleepingComputer US nadpis události

   Cisco patches new Secure Email Gateway zero-day exploited in attacks

   Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges. [...]

7. 14. 10. 2026 18:00 · Cisco PSIRT US

   Cisco Secure Email Gateway Arbitrary File Write Vulnerability

   A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write…

8. 14. 10. 2026 · zachyceno 22:00 · CISA KEV US

   Cisco Secure Email Gateway Relative Path Traversal Vulnerability (CVE-2026-76519)

   CISA added CVE-2026-76519 to the Known Exploited Vulnerabilities catalog. Affected product: Cisco Secure Email Gateway. Remediation due date: 2026-10-17.