Cisco email security boxes can be rooted by... an email
- ID
- 24739
- Status
- summarized
- Published
- 16 Sep 2026, 12:01 AM
- Fetched
- 16 Sep 2026, 12:37 AM
- Provider
- The Register
- Category
- technology
- Original URL
- https://www.theregister.com/security/2026/09/15/cisco-email-security-boxes-can-be-rooted-by-an-email/5296604
- Source URL
- https://www.theregister.com/headlines.atom
Summary
- Score
- 6.5
- Created
- 16 Sep 2026, 12:44 AM
- Tags
- Audience
- developerssaas_startup_founders
What happened
A critical 9.8 CVSS flaw (CVE-2026-76461) in Cisco Secure Email Gateway allows attackers to gain root access simply by sending a malicious email, with no login required. Cisco confirms active exploitation and states there are no workarounds, urging admins to patch to AsyncOS 15.5.5-014, 16.0.4-30, or 16.5.0-780 immediately.
Why it matters
If your organization runs Cisco Secure Email Gateway on-prem, you must patch immediately and assume local logs may be tampered with; if compromise is suspected, deploy a fresh VM, rebuild the configuration, and rotate all credentials and cryptographic material.
Discussion angle
How to verify if your email gateway is compromised when the root-level attacker can tamper with the logs, and the practical steps for rebuilding a virtual appliance from scratch.