started · updated
Cisco patches critical zero-day SQL injection vulnerability
Cisco has released urgent patches to address CVE-2026-76461, a critical zero-day SQL injection vulnerability affecting Cisco Secure Email Gateway appliances running AsyncOS Software. The flaw, which carries a CVSS score of 9.8, allows unauthenticated remote attackers to achieve root-level Remote Code Execution (RCE) by sending a specially crafted inbound email.
The vulnerability stems from insufficient validation within the email parsing logic. Successful exploitation enables complete system compromise, allowing attackers to intercept, read, or modify all organizational email traffic. Cisco confirmed that the vulnerability has been actively exploited in the wild.
In response, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the flaw to its Known Exploited Vulnerabilities catalog, requiring federal civilian agencies to remediate affected systems. Organizations are advised to audit mail logs for suspicious SQL statements and apply the available security updates immediately.
Entities
Anthropic · AsyncOS · CISA · CVE-2026-76461 · Cisco · Cisco Secure Email Gateway · Gartner · OpenAI · Sonar · Verizon
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 7 SOURCES] The vulnerability is being actively exploited in the wild as a zero-day. flagthis.com · socprime.com · securityaffairs.com · www.networkworld.com · www.theregister.com · +2 more
- [○ 1 SOURCE] Software vulnerability exploitation surpassed stolen credentials as the primary initial breach vector in Verizon’s 2026 Data Breach Investigations Report.
- [● 4 SOURCES] CISA added CVE-2026-76461 to its Known Exploited Vulnerabilities catalog. securityaffairs.com · www.networkworld.com · socprime.com · cybersecurity-news.de
- [● 7 SOURCES] The CVE-2026-76461 vulnerability has a CVSS score of 9.8. flagthis.com · socprime.com · securityaffairs.com · www.networkworld.com · www.theregister.com · +2 more
- [○ 1 SOURCE] Ransomware was involved in 48% of breaches according to Verizon’s 2026 report.
- [● 7 SOURCES] CVE-2026-76461 is a critical SQL injection vulnerability in Cisco Secure Email Gateway appliances running AsyncOS Software. flagthis.com · socprime.com · securityaffairs.com · www.networkworld.com · www.theregister.com · +2 more
- [● 6 SOURCES] Unauthenticated remote attackers can achieve root-level Remote Code Execution (RCE) by sending a specially crafted inbound email. flagthis.com · socprime.com · www.ad-hoc-news.de · www.networkworld.com · www.theregister.com · +1 more
- [○ 1 SOURCE] Anthropic’s Mythos-class models identified 26,153 vulnerability candidates in open-source software during the first half of 2026.
- [● 6 SOURCES] Cisco has released urgent patches for the vulnerability. cybernoz.com · flagthis.com · socprime.com · www.ad-hoc-news.de · www.networkworld.com · +1 more