/
← Voltar ao feed
critical

CERT-FR: Cisco AsyncOS Secure Email Gateway RCE flaw CVE-2026-76519 actively exploited

1 fonte(s) · 1 atualização(ões) · publicado 14/10/2026 21:00 · coletado há 6 horas

CERT-FR advisory CERTFR-2026-AVI-1325, published 15 October 2026, reports a vulnerability in Cisco AsyncOS Software for Cisco Secure Email Gateway that allows a remote attacker to execute arbitrary code and compromise data integrity. Cisco states that CVE-2026-76519 is actively exploited. The advisory is based on Cisco security advisory cisco-sa-esa-afw-zqYJkjxp dated 14 October 2026. It gives no CVSS score, IOCs, attribution or details on the exploitation campaign.

Technical Details

  • Affected: AsyncOS Software for Secure Email Gateway 15.5.x versions prior to 15.5.5-014.
  • Affected: AsyncOS Software for Secure Email Gateway 16.x versions prior to 16.5.0-780.
  • Impact: remote arbitrary code execution and data integrity compromise.
  • Vendor advisory: cisco-sa-esa-afw-zqYJkjxp.
  • The advisory does not state whether authentication is required or what the exploitation vector is.

Remediation

  • Consult Cisco advisory cisco-sa-esa-afw-zqYJkjxp and upgrade to 15.5.5-014 or later (15.5.x branch) or 16.5.0-780 or later (16.x branch).
  • Prioritize patching because of confirmed in-the-wild exploitation.

Linha do tempo

  1. cert.ssi.gouv.fr ↗ · pub. 14/10/2026 21:00 · coletado 20/10 16:32 primeiro registro

    CERT-FR: Cisco AsyncOS Secure Email Gateway RCE flaw CVE-2026-76519 actively exploited

    ler a análise desta fonte

    CERT-FR advisory CERTFR-2026-AVI-1325, published 15 October 2026, reports a vulnerability in Cisco AsyncOS Software for Cisco Secure Email Gateway that allows a remote attacker to execute arbitrary code and compromise data integrity. Cisco states that CVE-2026-76519 is actively exploited. The advisory is based on Cisco security advisory cisco-sa-esa-afw-zqYJkjxp dated 14 October 2026. It gives no CVSS score, IOCs, attribution or details on the exploitation campaign.

    Technical Details

    • Affected: AsyncOS Software for Secure Email Gateway 15.5.x versions prior to 15.5.5-014.
    • Affected: AsyncOS Software for Secure Email Gateway 16.x versions prior to 16.5.0-780.
    • Impact: remote arbitrary code execution and data integrity compromise.
    • Vendor advisory: cisco-sa-esa-afw-zqYJkjxp.
    • The advisory does not state whether authentication is required or what the exploitation vector is.

    Remediation

    • Consult Cisco advisory cisco-sa-esa-afw-zqYJkjxp and upgrade to 15.5.5-014 or later (15.5.x branch) or 16.5.0-780 or later (16.x branch).
    • Prioritize patching because of confirmed in-the-wild exploitation.