Home / Sep 15, 2026 / Story
0
#1 SecurityWeek general September 15, 2026 at 05:18 UTC

Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation

By Eduard Kovacs

AI Summary

CVE-2026-76461 is an unauthenticated remote code execution zero-day in Cisco Secure Email Gateway that allows attackers to execute arbitrary commands with root privileges on the underlying OS. The vulnerability is under active exploitation, making immediate patching or mitigation critical for organizations relying on Cisco's email security appliances.

Relevance score: 92.0/100

# More from September 15

  1. 10
    Microsoft’s Patching Schneier on Security