Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-15 06:11 UTC
  • Importiert: 2026-09-21 13:58 UTC
  • CVSS: 9.8
  • Quelle-ID: thn_global
  • uid_hash: 518d72f6e6fe59f1081686edde3e723dc3a8a1f4c585b0c2a40bccb662e60550

Inhalt

Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild.

The vulnerability, tracked as CVE-2026-76461, carries a CVSS score of 9.8 out of a maximum of 10.0. It has been described as a case of insufficient validation in the email parsing logic that could allow an unauthenticated, remote attacker

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-76461

CRITICAL

9.8

CRITICAL

9.8

0.29543

0.98179

2026-09-14

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews