Cisco Warns Customers of Actively Exploited Zero-Day in Email Gateways

A critical zero-day SQL injection (CVE-2026-76461) in Cisco Secure Email Gateway's AsyncOS was exploited in the wild via unauthenticated crafted emails, enabling arbitrary SQL execution that leads to root-level command execution; Cisco and CISA marked it high severity (CVSS 9.8) and added it to the KEV catalog, and vendors recommend immediate patching to fixed AsyncOS releases, forensic preservation, credential/certificate rotation, and active hunting for prior compromise.