Cisco Warns of Zero-Day Exploit in Secure Email Gateways

Cisco has issued a warning about a critical zero-day vulnerability in its Secure Email Gateway appliances. The flaw, tracked as CVE-2026-76461, allows an attacker to gain root access through malicious emails.

The vulnerability can be exploited remotely without authentication and affects both physical and virtual devices, regardless of configuration. Cisco has confirmed that the vulnerability is already being actively exploited in the wild.

The company has stated that there are no workarounds available for this issue and recommends checking Secure Email Gateway logs for suspicious SQL statements to detect possible exploitation.