Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Cisco Secure Email Gateway allows remote file write

CVE-2026-76519 · published 4 days ago · actively exploited
Summary

The Cisco Secure Email Gateway can be tricked by an outside attacker to place files anywhere on the server it runs on. This could let the attacker take control of the system or disrupt email services. Apply the latest security update from Cisco as soon as possible and limit network access to the gateway.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco secure email gateway All versions
cisco cisco secure email 14.0.0-698
cisco asyncos >= 15.0, < 15.5.5-014
>= 16.0, < 16.5.0-780
cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*
Original advisory text
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.
References
Fix within
Internet-facing 3 days
and check for signs of compromise
Internal 3 days
and check for signs of compromise
  • Known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
Known exploited
Listed in the CISA KEV catalogue - exploitation confirmed in the wild.
2% chance of attack within 30 days
Type
CWE-23Relative Path Traversal
Timeline
Published14 Oct 2026
Updated16 Oct 2026
First seen14 Oct 2026
Sources
CVE-2026-76519 · NVD
CVE-2026-76519 · CISA KEV
CVE-2026-76519 · MITRE
Track software like this
Free during beta