---
cve: "CVE-2026-76519"
severity: "CRITICAL"
cvss: 9.8
epss: "2.2%"
vendor: "Cisco"
kev: true
exploited: true
published: "2026-10-14 17:19:10"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-10-28T09:21:47+01:00"
---

# CVE-2026-76519

> 9.8 CRITICAL · ⚠️ CISA KEV (13 Tage) · 🔓 Exploited

## Beschreibung

A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.

This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.

## CNA-Record (Kanon, cvelistV5)

- CNA: **cisco**
- State: PUBLISHED
- Stand: 2026-10-15 03:56:57
- CNA-CVSS: **9.8** (`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`)

## CISA-Anreicherung (vulnrichment/ADP)

- CISA KEV seit: **14.10.2026**
- CISA-SSVC (Coordinator, v2.0.3):
  - Exploitation: **active**
  - Automatable: **yes**
  - Technical Impact: **total**

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Schwachstellen-Klasse

- **CWE-23** — Relative Path Traversal
  The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

## Angriffsmuster (CAPEC)

- [CAPEC-76 — Manipulating Web Input to File System Calls](https://capec.mitre.org/data/definitions/76.html) _(Severity: Very High)_
- [CAPEC-139 — Relative Path Traversal](https://capec.mitre.org/data/definitions/139.html) _(Severity: High)_

## BSI-Hinweise (deutsch)

- [Cisco Secure Email Gateway: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten](https://wid.cert-bund.de/portal/wid/sicherheitshinweis/WID-SEC-W-2026-3963) — _BSI-Einstufung: kritisch_
  Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Secure Email Gateway ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.

## Referenzen

- <https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp>
- <https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76519>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2026-76519/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_