Cisco Secure Email Gateway SQL Injection – Actively Exploited
ID: 9bdd5409-0061-58da-9968-3253cb753dbc
STIX ID: report--9bdd5409-0061-58da-9968-3253cb753dbc
Feed Name: Kudelski Security
Threat Score
Cisco disclosed a critical unauthenticated SQL injection in AsyncOS for Cisco Secure Email Gateway (CVE-2026-76461, CVSS 9.8) that allows remote attackers to execute arbitrary commands as root; Cisco reports active exploitation and CISA added the CVE to the Known Exploited Vulnerabilities catalog with an expedited remediation/forensic triage deadline. No workaround exists—Cisco has published fixed releases and affected customers are urged to upgrade and perform forensic investigation per BOD-26-04.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.