Attributed metadata history
Up to 100 retained publisher events per page for 04107f7af15f525bb7c8bd9f2720cfe4aeb3cc4f1c9e828e47ba59ac7efb8f44. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_2dcfd086714def6364
observed · 2026-10-12 08:12:03 UTC
OverviewOn September 14, 2026, Cisco published a security advisory for CVE-2026-76461, a critical SQL injection vulnerability affecting Cisco AsyncOS Software for Cisco Secure Email Gateway. The vulnerability has a reported CVSS v3.1 base score of 9.8 and could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on an affected appliance.Cisco Secure Email Gateway, formerly known as IronPort Email Security Appliance, is an enterprise email security product that inspects inbound and outbound email for threats including phishing, malware, spam, and business email compromise. Because affected gateways process externally delivered email as part of their normal operation, exploitation does not require access to an administrative interface or authentication. An attacker can reportedly trigger the vulnerability by sending a specially crafted email through a vulnerable gateway.CVE-2026-76461 was added to CISA's Known Exploited Vulnerabilities (KEV) catalog on the same day as the vendor disclosed the vulnerability, indicating that CVE-2026-76461 was exploited as a zero-day prior to disclosure. Cisco noted that their PSIRT became aware of active exploi
Fingerprint: 5ab7a004f3f0cd83752e2a803b93de30f93e7099903bc0602b0a4ee52137a258
intelligence_src_2dcfd086714def6364
observed · 2026-10-12 08:12:03 UTC
available
Fingerprint: 47122ecdb791516aff8705fd22d4a8faf01e3da83d97fd9f275fd639869e44e4