CVE-2026-76461 — CVE & Security Advisory Radar

🎯 CVE-2026-76461 🔓 Exploited 🇪🇺 EUVD

📄 .md Alle CVEs anzeigen ✕

CVE-2026-76461 | A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that contains malicious SQL statements through an affected device. A s

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.

This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that contains malicious SQL statements through an affected device. A successful exploit could allow the attacker to execute arbitrary SQL statements, leading to command execution with root privileges on the underlying operating system.

Klassifikation & Betroffenheit:

Cisco Cisco Secure Email 13.5.1-277Cisco Secure Email 13.0.5-007Cisco Secure Email 15.0.1-030Cisco Secure Email 15.5.0-048Cisco Secure Email 14.0.0-698Cisco Secure Email 13.0.0-392Cisco Secure Email 15.0.3-002Cisco Secure Email 16.0.3-044

Improper Control of Generation of Code ('Code Injection') 🎯 Medium

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

🛡️ Empfohlene Mitigation: Refactor your program so that you do not have to dynamically generate code.

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-35 · Leverage Executable Code in Non-Executab… (Very High) CAPEC-77 · Manipulating User-Controlled Variables (Very High) CAPEC-242 · Code Injection (High)

🎯 ATT&CK-Techniken (Kill-Chain-Verhalten):

T1027.006 · Obfuscated Files or Information: H… T1027.009 · Obfuscated Files or Information: E… T1564.009 · Hide Artifacts: Resource Forking

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2026-76460 10.0 CVE-2026-76423 10.0 CVE-2026-20130 10.0 CVE-2026-20192 10.0 CVE-2026-20315 10.0

🧪 Exploit-Evidenz:

🐙 HORKimhab/CVE-2026-76461 🐙 0xBlackash/CVE-2026-76461 🐙 fevar54/CVE-2026-76461-Detection

📰 Eigene Berichterstattung: ➔ Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation ➔ CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in t ➔ Cisco patches actively exploited email gateway zero-day (CVE-2026-76461) ➔ Cisco AsyncOS: CVE-2026-76461 wird aktiv ausgenutzt – Patch bis 17. September 20 ➔ CVE-2026-76461 bei Cisco Secure Email Gateway: Root-Command-Ausführung aktiv aus

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

Ausnutzungs-Zeitleiste:

Reserviert 2026

Veröffentlicht 09/2026

Im KEV seit 09/2026

Heute 17.09.

CVSS-Vektor-Analyse: 9.8

AV · Angriffsvektor Netzwerk

AC · Komplexität Gering

PR · Privilegien Keine

UI · Interaktion Keine

S · Scope Unverändert

C · Vertraulichkeit Hoch

I · Integrität Hoch

A · Verfügbarkeit Hoch

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Veröffentlicht:14.09.2026

Aktualisiert:15.09.2026 12:47

Assigner (CNA):cisco

EUVD-ID:EUVD-2026-77625

Quellen: 🇪🇺 EUVD-Datenbank (ENISA) + 🇺🇸 NVD-Anreicherung · 24-h-Cache

CWE-94: Code Injection ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Management-Interface vom Internet trennen und ACLs auf vertrauenswürdige IPs beschränken.

Tier	2026-08-29	2026-09-16
≥90 %	4	0
≥50 %	4	0
≥10 %	3	0
<10 %	304	300

9.8 CRITICAL

🇪🇺 EUVD

EPSS

CVE-2026-76461 🌐 Netzwerk (Remote) 🔓 Keine Authentifizierung nötig

🔓 Cisco

CVE-2026-76461 | A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that contains malicious SQL statements through an affected device. A s

CWE-94: Code Injection ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Management-Interface vom Internet trennen und ACLs auf vertrauenswürdige IPs beschränken.

14.09.2026

🛡️ Details ➔

Zero-Day & Vulnerability Intelligence Hub