Skip to content
cve — cve-2026-76519

grep -rl "CVE-2026-76519" ./articles

CVE-2026-76519

An unauthenticated attacker sends an email to a Cisco Secure Email Gateway, and a path traversal in the malware-scanning path writes arbitrary files and executes commands as root. Scored 9.8, exploited, and there is a fix that needs no reboot.

1 article — 2026-10-15
IN CISA KEV — ADDED 2026-10-14

Authoritative record

Root Notes reports on this identifier; it does not maintain it. For the vendor advisory, the affected versions and the scoring, NVD and MITRE hold the primary records.

CISA added this identifier to its Known Exploited Vulnerabilities catalog on 2026-10-14, which means the agency has evidence of exploitation rather than a judgement that exploitation is possible. US federal agencies were required to remediate it by 2026-10-17.

Our coverage

../cve — every identifier we have covered