threatprotect.qualys.com • 3h
Critical Root RCE in Cisco Secure Email Gateway CVE-2026-76461
CVE-2026-76461 is a critical SQL injection vulnerability (CWE-89) within the email parsing engine of Cisco Secure Email Gateway appliances running AsyncOS Software. Unauthenticated remote attackers can achieve root-level Remote Code Execution (RCE) by sending a specially crafted inbound email. This flaw bypasses the web management interface entirely, targeting the core mail processing logic to execute arbitrary commands with the highest OS privileges. The vulnerability allows for complete system compromise, enabling attackers to intercept, read, or modify all organizational email traffic. Cisco has released urgent patches following confirmation of active zero-day exploitation in the wild.