- Critical 9.8
- Known exploited (CISA KEV)
CVE-2026-76519
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.
Scores
The facts
- Published
- 14 October 2026
- Last changed
- 15 October 2026
- NVD status
- Analyzed
- Severity
- Critical, CVSS 9.8 out of 10 (version 3.1)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- Affects
- cisco asyncos
- Known exploited
- Yes. CISA added it to the Known Exploited Vulnerabilities catalogue on 14 October 2026.
- EPSS
- 1.6% chance of exploitation activity in the next 30 days (percentile 75).
Is there a Securelyn advisory?
Not yet. Securelyn writes plain-English advisories for the flaws that matter most to businesses. Subscribe to the digest to hear about them.