Cisco Patches Secure Email Gateway Zero-Day Exploited in Attacks

{"heading":"The Vulnerability and Its Impact","subheading":"Insight into the Vulnerability","paragraph_1":"The vulnerability, tracked as CVE-2026-76461, affects Cisco AsyncOS Software for Cisco Secure Email Gateway and impacts both virtual and physical appliances. It is due to insufficient validation in the email parsing logic.","paragraph_2":"An attacker could exploit this vulnerability by sending a crafted email message containing malicious SQL statements. Successful exploitation can lead to command execution with root privileges on the underlying operating system.","paragraph_3":"Cisco shared indicators of compromise and advised network defenders to look for suspicious SQL statements in mail_logs. Admins should also check network and firewall logs for signs of suspicious activity, including uploads and downloads to and from external or malicious IP addresses."}