Cisco Secure Email Gateway Remote Code Execution Vulnerability

A vulnerability was identified in Cisco products. A remote attacker could exploit this vulnerability to trigger elevation of privilege, remote code execution and data manipulation on the targeted system.

CVE-2026-76519 is being exploited in the wild. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An unauthenticated, remote attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system. Hence, the risk level is rated as High Risk.

Remote Code Execution

Elevation of Privilege

System / Technologies affected

Cisco Secure Email Gateway (physical and virtual appliances)

For affected versions, please refer to the link issued by the vendor:

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

Vulnerability Identifier