Posting Date: 2026/10/15

【Vulnerability Alert】Cisco Secure Email Gateway has a critical security vulnerability (CVE-2026-76519)

  • Subject:Cisco Secure Email Gateway has a critical security vulnerability (CVE-2026-76519)


  • Description:
    • Forwarded from the TWCERT/CC Security Alert TWCERTCC-200-202610-00000023
    • Cisco has published a critical security vulnerability (CVE-2026-76519, CVSS: 9.8) for Cisco Secure Email Gateway. This vulnerability exists in Advanced Malware Protection (AMP) and may allow an unauthenticated remote attacker to write arbitrary files on the underlying operating system.
  • Affected Platforms:
    • Cisco AsyncOS Software for Cisco Secure Email Gateway version 15.5, Cisco AsyncOS Software for Cisco Secure Email Gateway version 160, Cisco AsyncOS Software for Cisco Secure Email Gateway version 16.5
  • Recommended Actions:
    • Please update to the following versions: Cisco AsyncOS Software for Cisco Secure Email Gateway version 15.5.5-014, Cisco AsyncOS Software for Cisco Secure Email Gateway version 16.5.0-780
  • References:
    1. https://www.twcert.org.tw/tw/cp-169-11288-17ac8-1.html

Computer and Communication Center
Network System Division