vendors:CISA × cves:CVE-2026-76461 × limpar

Resultados

2 casos · pág. 1/1

cisa.gov · há 1d critical

CISA adds exploited Cisco Secure Email Gateway SQL injection flaw CVE-2026-76461 to KEV catalog

CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-14 based on evidence of active exploitation: CVE-2026-76461, a SQL injection vulnerability in Cisco Secure Email Gateway. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the f…

CVE-2026-76461 government

theregister.com · há 1d · 2 fontes critical

Cisco Secure Email Gateway zero-day CVE-2026-76519 allows unauthenticated root RCE via malicious email, exploited in the wild

Cisco disclosed that CVE-2026-76519, a critical (CVSS 9.8) flaw in Secure Email Gateway (SEG), has been exploited as a zero-day before a fix was available. A remote, unauthenticated attacker can write files and execute commands as root on the appliance simply by sending a malicious email. CISA added the flaw to its Known Exploited Vulnera…

CVE-2026-76519 CVE-2026-76461 CVE-2025-20393