CVE record · 7 sources
CVE-2026-76461
KEV · due 17 Sep 2026 (overdue)Cisco Secure Email Gateway SQL Injection Vulnerability
- Vendor
- Cisco
- Product
- Secure Email Gateway
- EPSS
- 1.00 (p100)
- CISA KEV
- added 14 Sep 2026, due 17 Sep 2026 (45d overdue)
- Weakness
- CWE-89
- Exposure class
Coverage
7Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Cisco Secure Email Gateway SQL Injection Vulnerability
Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying…
-
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability This type of…
-
Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation
Categories: Threat Research Tags: advisory, vulnerability, Cisco
-
Cisco Secure Email Gateway SQL Injection Vulnerability
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.…
-
Cisco Secure Email Gateway SQL Injection Vulnerability
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.…
-
September 2026 CVE Landscape
In September 2026, Insikt Group® identified 94 high-impact vulnerabilities that should be prioritized for remediation, 59 of which had a Very Critical Recorded Future Risk Score. This represents a 29% increase from last month.
-
21st September – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 21st September, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Japan’s Digital Agency, which operates the Government Solution Service used…