CVE-2026-76519: listed in the CISA KEV catalog CVE-2026-76519 · CVSS 9.8 CRITICAL · KEV 2026-10-14
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.
This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.
Is CVE-2026-76519 exploited? Listed in the CISA KEV catalog on 2026-10-14. Federal remediation due 2026-10-17. Public exploit code: none found in monitored sources. Which products and versions are affected? Cisco · Cisco Secure Email · 13.0.0-392 Cisco · Cisco Secure Email · 13.5.1-277 Cisco · Cisco Secure Email · 14.0.0-698 Cisco · Cisco Secure Email · 14.2.0-620 Cisco · Cisco Secure Email · 13.0.5-007 Cisco · Cisco Secure Email · 14.3.0-032 Cisco · Cisco Secure Email · 14.2.1-020 Cisco · Cisco Secure Email · 13.5.4-038 Cisco · Cisco Secure Email · 15.0.0-104 Cisco · Cisco Secure Email · 15.0.1-030 Cisco · Cisco Secure Email · 15.5.1-055 Cisco · Cisco Secure Email · 15.5.0-048 Cisco · Cisco Secure Email · 15.5.2-018 Cisco · Cisco Secure Email · 15.0.3-002 Cisco · Cisco Secure Email · 16.0.0-050 Cisco · Cisco Secure Email · 16.0.0-054 Cisco · Cisco Secure Email · 15.5.3-022 Cisco · Cisco Secure Email · 16.0.1-017 Cisco · Cisco Secure Email · 16.0.4-016 Cisco · Cisco Secure Email · 15.5.4-012 Is there a patch? No patch identifier recorded here yet.
What PlainSec published about CVE-2026-76519 Primary sources What this record does not say No EPSS score. No patch identifier. KEV and EPSS are re-checked daily. Record last updated 2026-10-15.
CVE-2026-76519: listed in the CISA KEV catalog CVE-2026-76519 · CVSS 9.8 CRITICAL · KEV 2026-10-14
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.
This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.
Is CVE-2026-76519 exploited? Listed in the CISA KEV catalog on 2026-10-14. Federal remediation due 2026-10-17. Public exploit code: none found in monitored sources. Which products and versions are affected? Cisco · Cisco Secure Email · 13.0.0-392 Cisco · Cisco Secure Email · 13.5.1-277 Cisco · Cisco Secure Email · 14.0.0-698 Cisco · Cisco Secure Email · 14.2.0-620 Cisco · Cisco Secure Email · 13.0.5-007 Cisco · Cisco Secure Email · 14.3.0-032 Cisco · Cisco Secure Email · 14.2.1-020 Cisco · Cisco Secure Email · 13.5.4-038 Cisco · Cisco Secure Email · 15.0.0-104 Cisco · Cisco Secure Email · 15.0.1-030 Cisco · Cisco Secure Email · 15.5.1-055 Cisco · Cisco Secure Email · 15.5.0-048 Cisco · Cisco Secure Email · 15.5.2-018 Cisco · Cisco Secure Email · 15.0.3-002 Cisco · Cisco Secure Email · 16.0.0-050 Cisco · Cisco Secure Email · 16.0.0-054 Cisco · Cisco Secure Email · 15.5.3-022 Cisco · Cisco Secure Email · 16.0.1-017 Cisco · Cisco Secure Email · 16.0.4-016 Cisco · Cisco Secure Email · 15.5.4-012 Is there a patch? No patch identifier recorded here yet.
What PlainSec published about CVE-2026-76519 Primary sources What this record does not say No EPSS score. No patch identifier. KEV and EPSS are re-checked daily. Record last updated 2026-10-15.