Cisco patches new Secure Email Gateway zero-day exploited in attacks

Cisco fixed a zero-day, CVE-2026-76519, in its Secure Email Gateway, an appliance organizations use to scan mail. A crafted email attachment triggers a path traversal bug in its attachment scanning, letting an unauthenticated attacker write files and run commands as root. Cisco says it saw exploitation this month and advises rotating credentials and limiting access.

Summary written with AI by HowTechMoves, based on reporting by BleepingComputer.