CVE-2026-76461

Cisco Secure Email Gateway SQL Injection Vulnerability

CVSS 9.8 critical · Cisco Cisco Secure Email · published 2026-09-14

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that contains malicious SQL statements through an affected device. A successful exploit could allow the attacker to execute arbitrary SQL statements, leading to command execution with root privileges on the underlying operating system.

NVD · CVE.org

Coverage 2 sources

1. 2026-09-14 CISA Cybersecurity Advisories high CISA Adds One Known Exploited Vulnerability to Catalog

   CISA added CVE-2026-76461, a Cisco Secure Email Gateway SQL injection vulnerability, to its Known Exploited Vulnerabilities Catalog.

2. 2026-09-15 Help Net Security critical Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)

   Cisco patches zero-day SQL injection vulnerability (CVE-2026-76461) in Secure Email Gateway.

Also covered

• CVE-2026-86950 Apple iOS and iPadOS CVSS 8.8 · 1 article · 2026-09-29
• CVE-2023-6548 Cloud Software Group NetScaler ADC CVSS 5.5 · 1 article · 2026-09-28
• CVE-2023-25608 Fortinet FortiAP-W2 CVSS 5.2 · 1 article · 2026-09-28
• CVE-2026-88772 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service CVSS 9.5 · 3 articles · 2026-09-28
• CVE-2026-88771 A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands CVSS 9.5 · 3 articles · 2026-09-28