[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQWRa_a-n-8iMYcpTOni_kJtimi2qFM1DplwNFWoOMM4":3},{"article":4,"iocs":47,"watch_terms":52,"solutions":53,"lesson":147},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"0e41ddf0-dc0f-477e-8b1e-ea64696b73fa","Cisco patches new Secure Email Gateway zero-day exploited in attacks","cisco-patches-new-secure-email-gateway-zero-day-exploited-in-attacks-996015","Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges. [...]","Cisco has released a patch for a critical zero-day vulnerability (CVE-2026-76519) in its Secure Email Gateway (SEG). The flaw, a relative path traversal weakness in the Advanced Malware Protection feature, allows unauthenticated remote attackers to execute commands with root privileges by sending a malicious attachment. Cisco confirmed active exploitation of this vulnerability in October 2026.","Cisco patches actively exploited zero-day in Secure Email Gateway allowing root command execution.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fcisco-patches-actively-exploited-secure-email-gateway-zero-day\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F10\u002F14\u002FCisco.jpg","2026-10-14T17:29:14+00:00","2026-10-14T18:00:07.382096+00:00",9,[17,20,23],{"name":18,"type":19},"Secure Email Gateway","product",{"name":21,"type":22},"Cisco","vendor",{"name":24,"type":25},"Advanced Malware Protection","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":26,"icon":28,"name":29,"slug":30},null,"Vulnerabilities","vulnerabilities",[32,37,42],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":38},{"id":39,"icon":28,"name":40,"slug":41},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":43},{"id":44,"icon":28,"name":45,"slug":46},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[48],{"type":49,"value":50,"context":51},"cve","CVE-2026-76519","Cisco Secure Email Gateway zero-day vulnerability",[21,18],{"controls":54,"vendors":141},[55,84,112],{"slug":56,"name":57,"problem":58,"products":59},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[60,68,76],{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":85,"name":86,"problem":87,"products":88},"patch-management","Automated patch management","Known holes get closed in days, not months.",[89,96,104],{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":85,"product_name":93,"url":94,"description":95},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"slug":113,"name":114,"problem":115,"products":116},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[117,125,133],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","core-email-protection","Proofpoint Core Email Protection","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Femail-protection","Email filtering for phishing, malware and business email compromise.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"mimecast","Mimecast","\u002Fvendor-logos\u002Fmimecast.png","mimecast-email-security","Mimecast Email Security","https:\u002F\u002Fwww.mimecast.com\u002Fproducts\u002Femail-security\u002F","Email filtering, impersonation protection and continuity.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"abnormal","Abnormal AI","\u002Fvendor-logos\u002Fabnormal.png","abnormal-email-security","Abnormal Inbound Email Security","https:\u002F\u002Fabnormal.ai\u002F","API-based email security for Microsoft 365 and Google Workspace using behavioural models.",[142],{"slug":143,"name":21,"logo_path":144,"roles":145},"cisco","\u002Fvendor-logos\u002Fcisco.png",[146],"affected",{"slug":148,"title":149,"body":150,"framework_refs":151,"framework_notes":162},"cisco-seg-zero-day-enables-unauthenticated-root-access","Cisco SEG Zero-Day Enables Unauthenticated Root Access","A critical path traversal vulnerability in Cisco's Secure Email Gateway allowed unauthenticated remote attackers to execute arbitrary commands with root privileges simply by sending a malicious email attachment — the very type of threat the product is designed to stop. The flaw resided in the Advanced Malware Protection feature, meaning a security control itself became the attack surface. Active exploitation was confirmed before many organizations could apply mitigations, highlighting the danger of zero-day vulnerabilities in perimeter security appliances. This incident underscores that security infrastructure is not immune to vulnerabilities and must be subject to the same rigorous patch and monitoring discipline as any other system. Delayed patching of internet-facing appliances — especially those processing untrusted external content — can have catastrophic consequences.",[152,153,154,155,156,157,158,159,160,161],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST SI-3: Malicious Code Protection","NIST RA-5: Vulnerability Monitoring and Scanning","NIST SC-7: Boundary Protection","ITIL: Change and Release Management (Emergency Change process)","ISO\u002FIEC 27001: A.12.6.1 Management of Technical Vulnerabilities",{}]