Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability

Attackers are exploiting a critical flaw in Cisco Secure Email Gateway (CVE-2026-76519, CVSS 9.8) that lets an unauthenticated sender write files to the appliance’s operating system via a crafted email attachment and potentially run commands as root, The Hacker News reports. Only gateways with the File Reputation service enabled and an older Content Scanner Tools package are vulnerable; fixes shipped in September and in a Content Scanner Tools update.