One Crafted Email = Root on Your Cisco Mail Gateway (CVE-2026-76461)
A SQL injection in Cisco Secure Email Gateway's AsyncOS email parser lets an unauthenticated attacker run arbitrary commands as root by delivering a single crafted email. No login, no exotic ports — just SMTP. CISA added it to KEV on 2026-09-14 with a due date of 2026-09-17.
Critical severity, 4 of 4. Act now — exploited, or trivially exploitable on an exposed service.CVSS 9.8Exploited in the wildKEV due 17 SEP 2026CVE-2026-76461
ciscoemail-gatewaykev