Live · 98 sources · updated 13m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 7 sources

CVE-2026-76461

KEV · due 17 Sep 2026 (overdue)

Cisco Secure Email Gateway SQL Injection Vulnerability

Vendor
Cisco
Product
Secure Email Gateway
EPSS
1.00 (p100)
CISA KEV
added 14 Sep 2026, due 17 Sep 2026 (45d overdue)
Weakness
CWE-89
Exposure class
Email

Coverage

7

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. KEV CISA KEV

    Cisco Secure Email Gateway SQL Injection Vulnerability

    Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying…

    KEV · due 17 Sep 2026 (overdue) Fix available CVE-2026-76461 Cisco
  2. CISA alert CISA

    CISA Adds One Known Exploited Vulnerability to Catalog

    CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability This type of…

    Exploited CVE-2026-76461 Cisco
  3. Research Sophos X-Ops

    Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation

    Categories: Threat Research Tags: advisory, vulnerability, Cisco

    Exploited CVE-2026-76461 Cisco
  4. Cisco advisory Cisco PSIRT

    Cisco Secure Email Gateway SQL Injection Vulnerability

    A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.…

    Fix available CVE-2026-76461 Cisco
  5. Cisco advisory Cisco PSIRT

    Cisco Secure Email Gateway SQL Injection Vulnerability

    A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.…

  6. Research Insikt Group

    September 2026 CVE Landscape

    In September 2026, Insikt Group® identified 94 high-impact vulnerabilities that should be prioritized for remediation, 59 of which had a Very Critical Recorded Future Risk Score. This represents a 29% increase from last month.

  7. Research Check Point Research

    21st September – Threat Intelligence Report

    For the latest discoveries in cyber research for the week of 21st September, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Japan’s Digital Agency, which operates the Government Solution Service used…

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help