actively-exploited-vulnerabilitygovernment-vulnerability-catalogperimeter-device-exposurewidely-deployed-product-advisory
Actively Exploited SQL Injection in Cisco Secure Email Gateway
Active Exploitation · 42 sources · Updated 1mo ago · First seen Sep 14, 2026
Cisco disclosed active exploitation of CVE-2026-76461, an SQL injection flaw affecting Cisco Secure Email Gateway deployments. The vulnerability affects unpatched releases of Cisco AsyncOS for Cisco Secure Email Gateway, Cisco Secure Email Gateway, and Cisco Secure Email and Web Manager.
CISA added CVE-2026-76461 to its Known Exploited Vulnerabilities Catalog, while the Canadian Centre for Cyber Security issued advisory AV26-921. Cisco has released a September 2026 security-hardening update; administrators should identify affected appliances and management systems and apply Cisco’s prescribed fixed releases promptly.
This is being exploited nowSee which actors are running it and whether you're in range.
Check your exposure
