CVE-2026-76519: Cisco Secure Email Gateway Relative Path Traversal Vulnerability
Summary
Cisco Secure Email Gateway has a relative path traversal vulnerability, identified as CVE-2026-76519. This flaw allows unauthenticated remote attackers to write arbitrary files to the operating system.
IFF Assessment
The vulnerability allows attackers to write arbitrary files to the operating system, which is a significant security risk.
Severity
CISA KEV: Listed as actively exploited. Federal patch due: October 17, 2026. Known ransomware use: Unknown.
Defender Context
Defenders need to prioritize applying mitigations for this vulnerability as instructed by Cisco. The ability for an unauthenticated attacker to write arbitrary files to the system poses a severe risk and could be leveraged for further exploitation or to introduce malware.