Skip to main content

Secure Email Gateway vulnerabilities

2 published alerts for Cisco Secure Email Gateway.

Actively exploited (KEV)

CVE-2026-76519

Cisco Secure Email Gateway Relative Path Traversal Vulnerability

Cisco Secure Email Gateway is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-76519). Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. CISA remediation due date: 2026-10-17. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)

CVE-2026-76461

Cisco Secure Email Gateway SQL Injection Vulnerability

Cisco Secure Email Gateway is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-76461). Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. CISA remediation due date: 2026-09-17. If you need help checking exposure, call (864) 335-9223.