Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

Summary

Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-76461, carries a CVSS score of 9.8 out of a maximum of 10.0. It has been described as a case of insufficient validation in the email parsing logic that could allow an unauthenticated, remote attacker

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.