CVE-2026-76461: Cisco Email Gateway Flaw Exploited
ID: f4780563-d230-5901-8cef-471142e22100
STIX ID: report--f4780563-d230-5901-8cef-471142e22100
Feed Name: SOCRadar Blog
Threat Score
**Active exploitation of CVE-2026-76461:** Cisco confirmed a critical SQL injection (CVSS 9.8, CWE-89) in AsyncOS for Secure Email Gateway that allows unauthenticated attackers to execute arbitrary SQL and gain root-level command execution via crafted emails; CISA added the flaw to its Known Exploited Vulnerabilities list and Cisco published fixed AsyncOS releases and IOC/incident-response guidance.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.