CISCO SECURE EMAIL GATEWAY ZERO-DAY EXPLOITED AGAIN

Summary from the TLDR IT newsletter

Cisco confirmed that a zero-day vulnerability in its Secure Email Gateway, tracked as CVE-2026-76519 with a CVSS score of 9.8, is actively being exploited in the wild. The path traversal flaw allows unauthenticated attackers to write files and execute root-level commands via crafted email attachments when File Reputation is enabled. Security agencies, including CISA and Germany's BSI, have issued warnings and urgent patching deadlines.