Stocks

Critical SQL Injection Vulnerability Hits Cisco Secure Email Gateway

Guavy AI Editorial Team Published September 16, 2026

Instruments

CSCO

A critical SQL injection vulnerability (CWE-89) has been identified in Cisco's Secure Email Gateway, which could allow an unauthenticated remote attacker to execute arbitrary SQL and gain command execution as root on the underlying operating system.

Cisco rates the issue CVSS 3.1 9.8 Critical (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The vulnerability, known as CVE-2026-76461, affects Cisco Secure Email Gateway running Cisco AsyncOS Software and was discovered in September 2026.

Cisco has released fixed AsyncOS releases to address the issue, including 15.5.5-014 for versions 15.5 and earlier, 16.0.4-302 for version 16.0, and 16.5.0-780 for version 16.5.

Cisco strongly recommends migrating to version 16.5.0-780, which has already been upgraded on Cisco Secure Email Cloud devices.

Critical SQL Injection Vulnerability Hits Cisco Secure Email Gateway

Anthropic IPO Could Boost Amazon and Alphabet Earnings

Chess Federation Freezes Fees for Eastern Anatolia and Southeastern Anatolia Regions

Amgen Details Growth Priorities Amid Strong Pipeline Progress