CVE-2026-76519 Advisory
Severity: CRITICAL (CVSS 9.8)
Status: Actively Exploited (KEV Catalog)
Vulnerability Details
A remote, unauthenticated attacker can write arbitrary files and execute commands with root privileges on Cisco Secure Email Gateway systems via crafted email attachments when the file reputation service is enabled.
Affected Products
- Cisco Secure Email Gateway (Advanced Malware Protection feature)
Remediation
- Refer to Cisco Security Advisory: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp
- Check CISA KEV Catalog for patch availability and additional guidance: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Recommendation
Prioritize patching due to active exploitation and critical severity rating.