CVE-2026-76519
9.8CriticalPublished 14 Oct 2026 · NVD status: Analyzed · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-23
Impact
Unauthenticated remote attackers can write arbitrary files and execute commands as root on the appliance by sending an email with a crafted attachment. No credentials or user interaction are required.
Root cause
Improper path handling (relative path traversal) occurs when processing email attachments while the Advanced Malware Protection file reputation service is enabled.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade Cisco Secure Email Gateway to the patched release referenced in the advisory, or temporarily disable the file reputation service in the Advanced Malware Protection (AMP) configuration until a patch is applied.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.