Tag

#seg

1 story tagged seg.

Bar chart of four Cisco security metrics related to CVE-2026-76461: 98 Cisco CVEs in CISA KEV since November 2021, 7 exploited by ransomware gangs, over 400 Secure Email Gateway appliances tracked by Shadowserver, and 5 critical CVEs patched in the September 2026 advisory. The Cisco Secure Email Gateway zero-day grants root via SQL injection in email parsing.

Cisco Secure Email Gateway zero-day grants root via email

CVE-2026-76461 is a root-level SQL injection zero-day in Cisco Secure Email Gateway. CISA confirmed active exploitation and set a 3-day patch deadline.

Lars Cornelissen · Sep 15, 2026