Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability

Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco said in an advisory on Wednesday. The attacker sends an email with a crafted attachment through the gateway and, if it succeeds, could the...

PT-2026-113737

Name of the Vulnerable Software and Affected Versions Cisco Secure Email Gateway versions prior to AsyncOS 15.5.5-014 Cisco Secure Email Gateway versions prior to AsyncOS 16.5.0-780 Content Scanner Tools versions prior to 25.3.0.5525 Description An unauthenticated remote attacker can write...