Phishious

What is Phishious? Phishious is an open-source Secure Email Gateway SEG evaluation toolkit designed for red-teamers and developed by the team at CanIPhish. Phishious provides the ability to see how various Secure Email Gateway technologies behave when presented with phishing material. 📬 Secure...

HtmlSmuggling

HtmlSmuggling HTML smuggling is a malicious technique used by hackers to hide malware payloads in an encoded script in a specially crafted HTML attachment or web page. The malicious script decodes and deploys the payload on the targeted device when the victim opens/clicks the HTML attachment/link...

CVE-2025-20393

CVE-2025-20393 📌 개요 CVE-2025-20393 은 Cisco AsyncOS 를 실행하는 Cisco Secure Email Gateway SEG 및 Cisco Secure Email and Web Manager SEWM 어플라이언스에 영향을 미치는 치명적인 원격 명령 실행RCE 취약점입니다. 이 취약점은 Spam Quarantine스팸 격리 기능의 잘못된 입력 검증 으로 인해 발생합니다. 인증되지 않은 원격 공격자 가 조작된 HTTP 요청을 전송하여 이 결함을 악용할 수 있으며, 이로 인해 루트 권한으로 임의 명...

CVE-2026-76461-Detection-Kit-

CVE-2026-76461 — 탐지 및 대응 키트 Cisco Secure Email GatewaySEG용 Cisco AsyncOS의 치명적인 SQL 인젝션 취약점인 CVE-2026-76461 에 대한 탐지, 헌팅, 교정 리소스입니다. ⚠️ 면책 조항 이 저장소에는 방어용 콘텐츠만 포함되어 있습니다: Sigma 규칙, YARA 규칙, 기술 분석, 침해 지표, 교정 지침. 익스플로잇 코드, PoC 또는 무기화된 도구는 포함되어 있지 않습니다. 이 취약점은 CISA의 알려진 악용 취약점KEV 카탈로그에 추가되었습니다. 공개 시점...

CVE-2026-76461

⚡ CVE-2026-76461 - 치명적 SQL 인젝션 Cisco Secure Email Gateway의 이메일 파싱 로직에 존재하는 치명적이고 원격에서 악용 가능한 SQL 인젝션 취약점으로, root 권한으로 임의 명령 실행까지 이어질 수 있습니다...

Cisco Secure Email Gateway SQLi (cisco-sa-esa-inj-2bLVGmhX)

According to its self-reported version, Cisco Secure Email Gateway is affected by a SQL injection vulnerability. - A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root...

CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

Overview On September 14, 2026, Cisco published a security advisory for CVE-2026-76461, a critical SQL injection vulnerability affecting Cisco AsyncOS Software for Cisco Secure Email Gateway. The vulnerability has a reported CVSS v3.1 base score of 9.8 and could allow an unauthenticated, remote...

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-76461 , carries a CVSS score of 9.8 out of a maximum of 10.0. It has been described as a case of...

CVE-2026-76442

creationtimestamp| type| source ---|---|--- 2026-09-14 20:45:13+00:00| seen| https://www.acn.gov.it/portale/w/cisco-sfuttamento-in-rete-della-cve-2026-76461-relativa-a-secure-email-gateway 2026-09-15 12:05:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvkliblu3e23...

Vulnerability exposure in Cisco Secure Email Gateway

Cisco has identified a vulnerability in Cisco Secure Email Gateway. This vulnerability lies in the processing of email messages within the Cisco AsyncOS software for Cisco Secure Email Gateway. It arises due to insufficient validation of incoming email messages. An unauthorized malicious actor ca...

CVE-2026-76461

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email...

CVE-2026-76442

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76441

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76440

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76443

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

EUVD-2026-77626

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76442 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76442 Cisco Secure Email Gateway Security Hardening Release

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-76442

CVE-2026-76442 affects Cisco Secure Email Gateway and Cisco Secure Email and Web Manager , where multiple internally discovered vulnerabilities stem from improper validation of specified quantity in input (CWE-1284). Cisco rates this HIGH severity (CVSS 7.5) with a network attack vector , no requ...

CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email...