Cisco Secure Email Gateway Remote Code Execution
Vulnerability
Release Date: 15 Oct 2026
A vulnerability was identified in Cisco products. A remote
attacker could exploit this vulnerability to trigger elevation of privilege,
remote code execution and data manipulation on the targeted system.
Note:
CVE-2026-76519 is being exploited in the wild. This
vulnerability is due to improper handling of email attachments when the file
reputation service is enabled. An unauthenticated, remote attacker could
exploit this vulnerability by sending an email that contains a crafted
attachment through an affected device. A successful exploit could allow the
attacker to write arbitrary files and execute commands with root privileges on
the underlying operating system. Hence, the risk level is rated as High Risk.
Impact
- Remote
Code Execution
- Data
Manipulation
- Elevation
of Privilege
System / Technologies affected
- Cisco
Secure Email Gateway (physical and virtual appliances)
For affected versions, please refer to the link issued by
the vendor:
Solutions
Before installation of the software, please visit the
vendor web-site for more details.
Apply fixes issued by the vendor:
Vulnerability Identifier
Source
Related Link
- https://www.cisa.gov/news-events/alerts/2026/10/14/cisa-adds-four-known-exploited-vulnerabilities-catalog
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp
沒有留言:
發佈留言