Skip to main content

Secure Email Gateway vulnerabilities

1 published alerts for Cisco Secure Email Gateway.

Actively exploited (KEV)

CVE-2026-76461

Cisco Secure Email Gateway SQL Injection Vulnerability

Cisco Secure Email Gateway is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-76461). Cisco AsyncOS software for Cisco Secure Email Gateway (SEG) contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. CISA remediation due date: 2026-09-17. If you need help checking exposure, call (864) 335-9223.