CVE-2026-76519

🎯 CVE-2026-76519 🔓 Exploited 🇪🇺 EUVD

💬 0 Diskussion 📄 .md Alle CVEs anzeigen ✕

CVE-2026-76519 | A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful ex

A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.

This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.

Klassifikation & Betroffenheit:

CWE-23 Cisco Cisco Secure Email 16.0.2-112Cisco Secure Email 15.5.0-048Cisco Secure Email 13.5.1-277Cisco Secure Email 14.2.0-620Cisco Secure Email 15.5.1-055Cisco Secure Email 15.5.4-012Cisco Secure Email 15.0.1-030Cisco Secure Email 13.0.0-392

Relative Path Traversal

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

🛡️ Empfohlene Mitigation: Assume all input is malicious. Use an "accept known good" input validation strategy, i.e., use a list of acceptable inputs that strictly conform to specifications. Reject any input that does not strictly conform to specifications, or transform it into something that does. When performing input validation, consider all …

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-76 · Manipulating Web Input to File System Ca… (Very High) CAPEC-139 · Relative Path Traversal (High)

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2026-76482 10.0 CVE-2026-76460 10.0 CVE-2026-76423 10.0 CVE-2026-20130 10.0 CVE-2026-20192 10.0

🧪 Exploit-Evidenz:

🐙 Mickysalivan/CVE-2026-76519-Proo

📰 Eigene Berichterstattung: ➔ Hunting in the mail path: five hypotheses for CVE-2026-76519 exposure ➔ Angriffe auf kritische Schwachstelle CVE-2026-76519 in Cisco Secure Email-Gatewa ➔ Cisco warnt vor aktiven Angriffen auf Secure Email Gateway mit CVE-2026-76519

🇩🇪 BSI-Sicherheitshinweise: BSI · kritisch · Cisco Secure Email Gateway: Schwachstelle ermöglicht Ausführen von bel ↗

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

🔗 sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvi…

Ausnutzungs-Zeitleiste:

Reserviert 2026

Veröffentlicht 10/2026

Im KEV seit 10/2026

Heute 22.10.

CVSS-Vektor-Analyse: 9.8

AV · Angriffsvektor Netzwerk

AC · Komplexität Gering

PR · Privilegien Keine

UI · Interaktion Keine

S · Scope Unverändert

C · Vertraulichkeit Hoch

I · Integrität Hoch

A · Verfügbarkeit Hoch

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CNA-Bewertung (cisco): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Veröffentlicht:14.10.2026

Aktualisiert:15.10.2026 03:56

Assigner (CNA):cisco

EUVD-ID:EUVD-2026-101420

CWE-23 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Management-Interface vom Internet trennen und ACLs auf vertrauenswürdige IPs beschränken.

Tier	CVEs	Anteil
≥90 %	725	0,2 %
≥50 %	3.224	0,9 %
≥10 %	22.086	5,9 %
<10 %	346.613	93,0 %

Tier

CVEs

Anteil

≥90 %

725

0,2 %

≥50 %

3.224

0,9 %

≥10 %

22.086

5,9 %

<10 %

346.613

93,0 %

Noch keine Analyse zu CVE-2026-76519

Beitrag zu CVE-2026-76519 verfassen

Zero-Day & Vulnerability Intelligence Hub