Arbitrary File Write Vulnerability in Cisco Secure Email Gateway's Advanced Malware Protection
CVE-2026-76519

9.8CRITICAL

Key Information:

Vendor

Cisco
Status
Cisco Secure Email
Vendor
CVE Published:
14 October 2026

Badges

💰 Ransomware👾 Exploit Exists📰 News Worthy

What is CVE-2026-76519?

A flaw in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway enables unauthenticated, remote attackers to manipulate files on the underlying operating system. This vulnerability arises from inadequate handling of email attachments when the file reputation service is activated. By sending an email with a specially crafted attachment, an attacker could exploit this weakness, leading to arbitrary file writes and potentially executing commands with elevated privileges.

Affected Version(s)

Cisco Secure Email 14.0.0-698

Cisco Secure Email 13.5.1-277

Cisco Secure Email 13.0.0-392

News Articles

favicon imageBleepingComputer

Cisco patches new Secure Email Gateway zero-day exploited in attacks

Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges.

5 hours ago

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 💰

    Used in Ransomware

  • 👾

    Exploit known to exist

  • 📰

    First article discovered by BleepingComputer

  • Vulnerability published

  • Vulnerability Reserved

.