security_identifier

CVE-2026-76461

Identifier for a critical flaw in the email parsing logic of Cisco AsyncOS for Secure Email Gateway, rated 9.8 on CVSS, in which a crafted message can lead to command execution with root privileges.

Current clusters

security1 publisher

A crafted email is already getting root on unpatched Cisco Secure Email Gateways

CVE-2026-76461 is under active exploitation, hits every physical and virtual Secure Email Gateway whatever its configuration, and has no workaround. CISA gave federal civilian agencies until September 17 to install the fixed builds.

Publishers:thehackernews.com

Reality

Evidence72
Adoption55
Hype gap0
Incentives60
Confidence68