CVE-2026-76519: presente nel catalogo CISA KEV CVE-2026-76519 · CVSS 9.8 CRITICAL · KEV 2026-10-14
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.
This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.
CVE-2026-76519 viene sfruttato? Inserito nel catalogo CISA KEV il 2026-10-14. Scadenza di remediation federale: 2026-10-17. Codice di exploit pubblico: nessuno trovato nelle fonti monitorate. Quali prodotti e versioni sono interessati? Cisco · Cisco Secure Email · 13.0.0-392 Cisco · Cisco Secure Email · 13.5.1-277 Cisco · Cisco Secure Email · 14.0.0-698 Cisco · Cisco Secure Email · 14.2.0-620 Cisco · Cisco Secure Email · 13.0.5-007 Cisco · Cisco Secure Email · 14.3.0-032 Cisco · Cisco Secure Email · 14.2.1-020 Cisco · Cisco Secure Email · 13.5.4-038 Cisco · Cisco Secure Email · 15.0.0-104 Cisco · Cisco Secure Email · 15.0.1-030 Cisco · Cisco Secure Email · 15.5.1-055 Cisco · Cisco Secure Email · 15.5.0-048 Cisco · Cisco Secure Email · 15.5.2-018 Cisco · Cisco Secure Email · 15.0.3-002 Cisco · Cisco Secure Email · 16.0.0-050 Cisco · Cisco Secure Email · 16.0.0-054 Cisco · Cisco Secure Email · 15.5.3-022 Cisco · Cisco Secure Email · 16.0.1-017 Cisco · Cisco Secure Email · 16.0.4-016 Cisco · Cisco Secure Email · 15.5.4-012 Esiste una patch? Nessun identificativo di patch registrato qui.
Cosa ha pubblicato PlainSec su CVE-2026-76519 Fonti primarie Cosa questa scheda non dice Nessun punteggio EPSS. Nessun identificativo di patch. KEV ed EPSS vengono ricontrollati ogni giorno. Scheda aggiornata il 2026-10-15.
CVE-2026-76519: presente nel catalogo CISA KEV CVE-2026-76519 · CVSS 9.8 CRITICAL · KEV 2026-10-14
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.
This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.
CVE-2026-76519 viene sfruttato? Inserito nel catalogo CISA KEV il 2026-10-14. Scadenza di remediation federale: 2026-10-17. Codice di exploit pubblico: nessuno trovato nelle fonti monitorate. Quali prodotti e versioni sono interessati? Cisco · Cisco Secure Email · 13.0.0-392 Cisco · Cisco Secure Email · 13.5.1-277 Cisco · Cisco Secure Email · 14.0.0-698 Cisco · Cisco Secure Email · 14.2.0-620 Cisco · Cisco Secure Email · 13.0.5-007 Cisco · Cisco Secure Email · 14.3.0-032 Cisco · Cisco Secure Email · 14.2.1-020 Cisco · Cisco Secure Email · 13.5.4-038 Cisco · Cisco Secure Email · 15.0.0-104 Cisco · Cisco Secure Email · 15.0.1-030 Cisco · Cisco Secure Email · 15.5.1-055 Cisco · Cisco Secure Email · 15.5.0-048 Cisco · Cisco Secure Email · 15.5.2-018 Cisco · Cisco Secure Email · 15.0.3-002 Cisco · Cisco Secure Email · 16.0.0-050 Cisco · Cisco Secure Email · 16.0.0-054 Cisco · Cisco Secure Email · 15.5.3-022 Cisco · Cisco Secure Email · 16.0.1-017 Cisco · Cisco Secure Email · 16.0.4-016 Cisco · Cisco Secure Email · 15.5.4-012 Esiste una patch? Nessun identificativo di patch registrato qui.
Cosa ha pubblicato PlainSec su CVE-2026-76519 Fonti primarie Cosa questa scheda non dice Nessun punteggio EPSS. Nessun identificativo di patch. KEV ed EPSS vengono ricontrollati ogni giorno. Scheda aggiornata il 2026-10-15.