CVE-2026-76461Vulnerability
Cisco Secure Email Gateway SQL Injection Vulnerability
Reported by 12 independent sources · first reported by Sophos X-Ops · last reported
Last reported 9 days ago
Fix due 17 Sep 2026
Used by ransomware: not knownCISA KEV catalogue
higher than 98% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
13 reports, newest first · the exact sentence from each-
Múltiples vulnerabilidades en productos de Cisco“…lnerabilidad perteneciente a la clase de neutralización incorrecta está siendo explotada activamente y remite al aviso específico de CVE-2026-76461.”
-
Cisco Warns of Exploited Secure Email Gateway Vulnerability“CVE-2026-76519 is the second Cisco Secure Email Gateway vulnerability exploited in the wild since mid-September, after CVE-2026-76461, another unauthenticated bug that could lead to command execution with root privileges.”
-
Cisco make-me-root email bug exploited as a 0-day by unknown crims“In mid-September, Cisco warned customers that criminals were exploiting a similar bug in SEG, tracked as CVE-2026-76461, that also turns a malicious email into root access.”
-
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability“On September 14 it disclosed CVE-2026-76461, a SQL injection flaw in the gateway's email parsing that could let an unauthenticated sender run commands as root through a crafted email.”
-
Top RCE Vulnerabilities“CVE-2026-76461”
-
September 2026 CVE Landscape“CVE-2026-76461”
-
21st September – Threat Intelligence Report“Cisco has addressed CVE-2026-76460 & CVE-2026-76461, two critical vulnerabilities affecting Cisco ISE and Secure Email Gateway with CVSS scores of 10.0 and 9.8.”
-
Risky Bulletin: Gemini hacked three companies too“[Cisco CVE-2026-76460 // Cisco CVE-2026-76461]”
-
Bulletin d'actualité CERTFR-2026-ACT-040 (21 septembre 2026)“CVE-2026-76461”
-
Cisco Secure Email Gateway SQL Injection Vulnerability“CVE-2026-76461”
-
Cisco drops another exploited zero-day, this time a perfect 10“The warning follows another actively exploited critical vulnerability disclosed days earlier, CVE-2026-76461, affecting its Secure Email Gateway and Secure Email and Web Manager appliances.”
-
CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild“CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild”
-
Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation“Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation”
Indicators reported together
named in the same reportsAlso named with it: CVE-2026-76460, CVE-2026-76440, CVE-2026-20353, CVE-2026-76443, CVE-2026-76441, CVE-2026-76519, CVE-2026-60004, CVE-2026-87491, CVE-2025-39964, CVE-2026-53266, CVE-2026-58704, CVE-2026-91843, CVE-2025-39682, CVE-2026-87886, CVE-2023-54391, CVE-2026-87902, CVE-2026-93616, CVE-2026-94127, CVE-2026-85102, CVE-2026-88771
Thanks — we review every report.