Follow the developments

Exploited Vulnerability Tracker

Documented exploitation, affected products and official response links. Check the linked advisory before acting.

A source-linked reference. Check dates show when a record was reviewed; they do not mean its underlying status changed.

Tracker data updated

1 record

Cisco Secure Email Gateway CVE-2026-76519 actively exploited

Cve
CVE-2026-76519 [1]
Product
Cisco Secure Email Gateway [1]
Exploitation
Cisco PSIRT became aware of active exploitation in October 2026 [2]
Mitigation
Upgrade to a fixed AsyncOS release; Content Scanner Tools 25.3.0.5525 and later contain the fix [1]
Status
Critical; software updates released; no workarounds available [1]
Last verified against sources
Last check
verified
Last material change
Next check due

Sources

  1. Cisco Secure Email Gateway Arbitrary File Write Vulnerability
  2. Cisco Warns of Exploited Secure Email Gateway Vulnerability

Related coverage

Record change history (1)
    • Cve: Not previously recorded → CVE-2026-76519
    • Product: Not previously recorded → Cisco Secure Email Gateway
    • Exploitation: Not previously recorded → Cisco PSIRT became aware of active exploitation in October 2026
    • Mitigation: Not previously recorded → Upgrade to a fixed AsyncOS release; Content Scanner Tools 25.3.0.5525 and later contain the fix
    • Status: Not previously recorded → Critical; software updates released; no workarounds available
    Read the coverage for this update