ctrlINT What the industry said about every indicator, with the quote

CVE-2026-76461Vulnerability

Cisco Secure Email Gateway SQL Injection Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 12 independent sources · first reported by Sophos X-Ops · last reported

Last reported 9 days ago

CISA KEVAdded 14 Sep 2026
Fix due 17 Sep 2026
Used by ransomware: not knownCISA KEV catalogue
EPSS29.5%
higher than 98% of CVEsFIRST EPSS, as of 23 Oct 2026

What the reports say

13 reports, newest first · the exact sentence from each
  1. “…lnerabilidad perteneciente a la clase de neutralización incorrecta está siendo explotada activamente y remite al aviso específico de CVE-2026-76461.”

    INCIBE-CERTGovernment
    Múltiples vulnerabilidades en productos de Cisco
  2. “CVE-2026-76519 is the second Cisco Secure Email Gateway vulnerability exploited in the wild since mid-September, after CVE-2026-76461, another unauthenticated bug that could lead to command execution with root privileges.”

    SecurityWeekNews
    Cisco Warns of Exploited Secure Email Gateway Vulnerability
  3. “In mid-September, Cisco warned customers that criminals were exploiting a similar bug in SEG, tracked as CVE-2026-76461, that also turns a malicious email into root access.”

    The Register (security)News
    Cisco make-me-root email bug exploited as a 0-day by unknown crims
  4. “On September 14 it disclosed CVE-2026-76461, a SQL injection flaw in the gateway's email parsing that could let an unauthenticated sender run commands as root through a crafted email.”

    The Hacker NewsNews
    Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability
  5. “CVE-2026-76461”

    SOCRadarVendor
    Top RCE Vulnerabilities
  6. “CVE-2026-76461”

    Recorded FutureVendor
    September 2026 CVE Landscape
  7. “Cisco has addressed CVE-2026-76460 & CVE-2026-76461, two critical vulnerabilities affecting Cisco ISE and Secure Email Gateway with CVSS scores of 10.0 and 9.8.”

    Check Point ResearchVendor
    21st September – Threat Intelligence Report
  8. “[Cisco CVE-2026-76460 // Cisco CVE-2026-76461]”

    Risky Business NewsNews
    Risky Bulletin: Gemini hacked three companies too
  9. “CVE-2026-76461”

    CERT-FRGovernment
    Bulletin d'actualité CERTFR-2026-ACT-040 (21 septembre 2026)
  10. “CVE-2026-76461”

    Cisco PSIRTVendor
    Cisco Secure Email Gateway SQL Injection Vulnerability
  11. “The warning follows another actively exploited critical vulnerability disclosed days earlier, CVE-2026-76461, affecting its Secure Email Gateway and Secure Email and Web Manager appliances.”

    The Register (security)News
    Cisco drops another exploited zero-day, this time a perfect 10
  12. “CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild”

    Rapid7Vendor
    CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
  13. “Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation”

    Sophos X-OpsVendor
    Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation

Indicators reported together

named in the same reports

Also named with it: CVE-2026-76460, CVE-2026-76440, CVE-2026-20353, CVE-2026-76443, CVE-2026-76441, CVE-2026-76519, CVE-2026-60004, CVE-2026-87491, CVE-2025-39964, CVE-2026-53266, CVE-2026-58704, CVE-2026-91843, CVE-2025-39682, CVE-2026-87886, CVE-2023-54391, CVE-2026-87902, CVE-2026-93616, CVE-2026-94127, CVE-2026-85102, CVE-2026-88771

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2026-76461 here?
No account needed. We do not store your IP address.