CVE-2026-76519
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
CVSS Score
9.8
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.
| CWE | CWE-23 |
| Vendor | cisco |
| Product | cisco secure email |
| Ecosystems | |
| Industries | NetworkingTelecommunications |
| Published | Oct 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for cisco cisco secure email
Be the first to know when new critical vulnerabilities affecting cisco cisco secure email are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Cisco / Cisco Secure Email
14.0.0-698 13.5.1-277 13.0.0-392 14.2.0-620 13.0.5-007 13.5.4-038 14.2.1-020 14.3.0-032 15.0.0-104 15.0.1-030 15.5.0-048 15.5.1-055 15.5.2-018 16.0.0-050 15.0.3-002 16.0.0-054 15.5.3-022 16.0.1-017 15.5.4-012 16.0.4-016 15.0.5-016 16.0.2-112 16.0.3-044