Cisco patches actively exploited zero-day in Secure Email Gateway allowing root access via a crafted email
Cisco confirmed active exploitation of CVE-2026-76461, a pre-authentication SQL injection in Secure Email Gateway that lets a crafted email execute commands as root, prompting a CISA remediation order.
- Victim
- Cisco Secure Email Gateway