{"metadata": {"vulnerability": "CVE-2026-76519", "count": 100, "kinds": {"milestone": 8, "sighting": 62, "kev": 11, "other": 19}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0429", "record": "NCSC-2026-0429", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-19T12:02:03.642Z", "date_only": false, "value": "2026-08-19T12:02:03.642Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-76519", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-76519", "field": "timestamps.asserted_at", "uuid": "fd000b21-e390-4a5d-be5b-2d5322e88cde", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": true, "value": "2026-10-14", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-76519", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": true, "value": "2026-10-14", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2026-76519", "field": "evidence.0.details.date_added", "uuid": "fd000b21-e390-4a5d-be5b-2d5322e88cde", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2026-76519", "field": "timestamps.first_seen_at", "uuid": "fd000b21-e390-4a5d-be5b-2d5322e88cde", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": true, "value": "2026-10-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1325", "record": "CERTFR-2026-AVI-1325", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-76519", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76519", "record": "FKIE_CVE-2026-76519", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2026-76519", "field": "status.status_updated_at", "uuid": "fd000b21-e390-4a5d-be5b-2d5322e88cde", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-76519", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2026-10-14T11:26:22Z", "date_only": false, "value": "2026-10-14T11:26:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus-2026-36", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "d29df407-9396-438e-bc04-9f5798620497", "url": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus-2026-36"}, {"timestamp": "2026-10-14T12:23:07Z", "date_only": false, "value": "2026-10-14T12:23:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-1042", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "09372526-6f8c-426b-a01a-525b71f51ae1", "url": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-1042"}, {"timestamp": "2026-10-14T15:55:00Z", "date_only": false, "value": "2026-10-14T15:55:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-ESA-AFW-ZQYJKJXP", "record": "CISCO-SA-ESA-AFW-ZQYJKJXP", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-14T15:55:02Z", "date_only": false, "value": "2026-10-14T15:55:02+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-ESA-AFW-ZQYJKJXP", "record": "CISCO-SA-ESA-AFW-ZQYJKJXP", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-14T16:00:00Z", "date_only": false, "value": "2026-10-14T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-ESA-AFW-ZQYJKJXP", "record": "CISCO-SA-ESA-AFW-ZQYJKJXP", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-14T16:00:00Z", "date_only": false, "value": "2026-10-14T16:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_cisco \u00b7 CISCO-SA-ESA-AFW-ZQYJKJXP", "record": "CISCO-SA-ESA-AFW-ZQYJKJXP", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-14T16:00:00Z", "date_only": false, "value": "2026-10-14T16:00:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-ESA-AFW-ZQYJKJXP", "record": "CISCO-SA-ESA-AFW-ZQYJKJXP", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-14T16:07:51.466Z", "date_only": false, "value": "2026-10-14T16:07:51.466Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-76519", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T16:07:51.466Z", "date_only": false, "value": "2026-10-14T16:07:51.466Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2026-76519", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T16:26:33.619Z", "date_only": false, "value": "2026-10-14T16:26:33.619613Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxtxmilm3q22", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "dae40faf-831f-46fb-aa6e-228d7b6d5763", "content": "Cisco Secure Email Gateway CVE-2026-76519 CVSS 9.8 pre-auth file write to root RCE is being exploited in the wild, no workaround \u2014 patch to AsyncOS 15.5.5-014 / 16.5.0-780 now. https://cti.securitycyber.uk", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxtxmilm3q22"}, {"timestamp": "2026-10-14T16:46:24Z", "date_only": false, "value": "2026-10-14T16:46:24+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-76519", "field": "timestamps.asserted_at", "uuid": "dc52c89f-0cfe-4e6e-bb5b-df9228066f91", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T16:46:24Z", "date_only": false, "value": "2026-10-14T16:46:24+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-76519", "field": "timestamps.first_seen_at", "uuid": "dc52c89f-0cfe-4e6e-bb5b-df9228066f91", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T16:46:24Z", "date_only": false, "value": "2026-10-14T16:46:24+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-76519", "field": "status.status_updated_at", "uuid": "dc52c89f-0cfe-4e6e-bb5b-df9228066f91", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T16:46:24.293Z", "date_only": false, "value": "2026-10-14T16:46:24.293Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-76519", "field": "evidence.0.details.added_date", "uuid": "dc52c89f-0cfe-4e6e-bb5b-df9228066f91", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T17:19:10Z", "date_only": false, "value": "2026-10-14T17:19:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6RC3-JWQ8-JM3V", "record": "GHSA-6RC3-JWQ8-JM3V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T17:19:10.747Z", "date_only": false, "value": "2026-10-14T17:19:10.747", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76519", "record": "FKIE_CVE-2026-76519", "field": "published"}, {"timestamp": "2026-10-14T17:47:03.272Z", "date_only": false, "value": "2026-10-14T17:47:03.272025Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxu44g3yhd26", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "f1143eb9-23e2-4199-bce5-3a43cf7cc205", "content": "Cisco\u3001\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u305fSecure Email Gateway\u306e\u65b0\u305f\u306a\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u306b\u30d1\u30c3\u30c1\u3092\u516c\u958b\n\nCisco\u306f\u3001Secure Email Gateway\uff08SEG\uff09\u3067\u65b0\u305f\u306b\u898b\u3064\u304b\u308a\u3001\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u306b\u30d1\u30c3\u30c1\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u3092\u7a81\u304b\u308c\u308b\u3068\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u306e\u653b\u6483\u8005\u304croot\u6a29\u9650\u3067\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u3066\u3057\u307e\u3044\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-76519\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u307e\u3059", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxu44g3yhd26"}, {"timestamp": "2026-10-14T18:12:28.592Z", "date_only": false, "value": "2026-10-14T18:12:28.592659Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxu5jvd35d2r", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "6e4d1029-c685-46af-9d01-5e6da5e1ae81", "content": "\ud83d\udea8 CVE-2026-76519 \u2014 CVSS 9.8 CRITICAL\n\nA vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76519\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxu5jvd35d2r"}, {"timestamp": "2026-10-14T18:32:26Z", "date_only": false, "value": "2026-10-14T18:32:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6RC3-JWQ8-JM3V", "record": "GHSA-6RC3-JWQ8-JM3V", "field": "published"}, {"timestamp": "2026-10-14T18:46:36.525Z", "date_only": false, "value": "2026-10-14T18:46:36.525518Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0429", "record": "NCSC-2026-0429", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-14T18:46:36.525Z", "date_only": false, "value": "2026-10-14T18:46:36.525518Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0429", "record": "NCSC-2026-0429", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-14T18:46:36.525Z", "date_only": false, "value": "2026-10-14T18:46:36.525518Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0429", "record": "NCSC-2026-0429", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-14T19:06:34.749Z", "date_only": false, "value": "2026-10-14T19:06:34.749824Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mxuakmgjij2i", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "faa430f8-6e4c-4b4b-a66a-1c1340dd8b4e", "content": "Cisco patched CVE-2026-76519, an exploited Secure Email Gateway zero-day, per BleepingComputer. A crafted attachment can write files and run commands as root. Affects SEGs with File Reputation on and Content Scanner Tools below 25.3.0.5525. bleepingcomputer.com/news/security/cisco-patches...", "url": "https://bsky.app/profile/entorisec.bsky.social/post/3mxuakmgjij2i"}, {"timestamp": "2026-10-14T19:50:09.132Z", "date_only": false, "value": "2026-10-14T19:50:09.132296Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxucykfafj27", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "b57f01b2-efdb-4c24-8eb7-636582451a5f", "content": "CVE-2026-76519\nThe Advanced Malware Protection part of Cisco Secure Email Gateway can be tricked by a specially crafted email attachment to place any file onto the server. If exploited, an attacker could run commands with\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxucykfafj27"}, {"timestamp": "2026-10-14T19:57:33.095Z", "date_only": false, "value": "2026-10-14T19:57:33.095925Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mxudfrpqvk2v", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "cc2cddf0-27f6-4522-805b-a4274ed076ae", "content": "\ud83d\uded1 CVE-2026-76519\nCisco Secure Email Gateway\nCVSS 9.8 / KEV: No\nTL;DR: A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gat\u2026\nhttps://cvesentinel.com/report/CVE-2026-76519?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mxudfrpqvk2v"}, {"timestamp": "2026-10-14T20:00:00Z", "date_only": false, "value": "2026-10-14T20:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/cisco-secure-email-gateway-remote-code-execution-vulnerability_20261015", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "aaebbdc4-bd50-405d-8cf7-2dd1e352c830", "url": "https://www.hkcert.org/security-bulletin/cisco-secure-email-gateway-remote-code-execution-vulnerability_20261015"}, {"timestamp": "2026-10-14T20:00:02Z", "date_only": false, "value": "2026-10-14T20:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2026-76519", "field": "timestamps.recorded_at", "uuid": "fd000b21-e390-4a5d-be5b-2d5322e88cde", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-14T20:00:02.749Z", "date_only": false, "value": "2026-10-14T20:00:02.749333Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fd000b21-e390-4a5d-be5b-2d5322e88cde", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "5cb7862f-e9ce-4953-9229-2f9cca34c9b7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fd000b21-e390-4a5d-be5b-2d5322e88cde"}, {"timestamp": "2026-10-14T20:12:29.379Z", "date_only": false, "value": "2026-10-14T20:12:29.379333Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxueah24vk2m", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "3d28faa7-2a18-47e4-8251-e94503d02aa4", "content": "Cisco patched CVE-2026-76519, an actively exploited Secure Email Gateway flaw that can let unauthenticated attackers execute commands as root via a crafted email attachment. The company advises checking for compromise and upgrading affected systems.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxueah24vk2m"}, {"timestamp": "2026-10-14T20:22:01.260Z", "date_only": false, "value": "2026-10-14T20:22:01.260740Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/zubiqo.bsky.social/post/3mxuerjnmti24", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "1ea5469a-12c7-4dc4-9e44-891be00de808", "content": "Attackers are exploiting a 9.8-rated flaw (CVE-2026-76519) in Cisco Secure Email Gateway, sending crafted attachments to write OS files and potentially run root commands without logging in.\n\nIt hits units with File Reputation enabled on Content Scanner Tools older than 25.3.0.5525.", "url": "https://bsky.app/profile/zubiqo.bsky.social/post/3mxuerjnmti24"}, {"timestamp": "2026-10-14T20:32:50.975Z", "date_only": false, "value": "2026-10-14T20:32:50.975775Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117441165434358270", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "d1b09404-576b-4d41-a958-dae179e61c90", "content": "Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability\nAttackers are exploiting a critical flaw in Cisco Secure Email Gateway (CVE-2026-76519, CVSS 9.8) that lets an unauthenticated sender write files to the appliance\u2019s operating system via a crafted email attachment and potentially run commands as root, The Hacker News reports. Only gateways with the File Reputation service enabled and an older Content Scanner Tools package are vulnerable; fixes shipped in September and in a Content Scanner Tools update. https://thehackernews.com/2026/10/cisco-warns-of-active-attacks.html", "url": "https://infosec.exchange/users/edwardk/statuses/117441165434358270"}, {"timestamp": "2026-10-14T20:32:52.458Z", "date_only": false, "value": "2026-10-14T20:32:52.458332Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxufew5h3w2y", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "4d5aabb6-fa82-40b3-9455-a824a4d26e67", "content": "Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability\n\nAttackers are exploiting a critical flaw in Cisco Secure Email Gateway (CVE-2026-76519, CVSS 9.8) that lets an unauthenticated sender writ... https://threatintel.cc/2026/10/14/cisco-warns-of-active-attacks.html", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxufew5h3w2y"}, {"timestamp": "2026-10-14T20:36:26.152Z", "date_only": false, "value": "2026-10-14T20:36:26.152511Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117441156959507975", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "7eab6934-2572-454d-afb4-86a4bd06a6ab", "content": "Cisco zero-day: CVE-2026-76519 (CVSS3.1: 9.8 critical) Cisco Secure Email Gateway Arbitrary File Write Vulnerability\n\nIn October 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability.\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp\nCISA added this to the KEV Catalog today: https://www.cisa.gov/news-events/alerts/2026/10/14/cisa-adds-four-known-exploited-vulnerabilities-catalog\n#Cisco #zeroday #CVE #KEV #CISA", "url": "https://infosec.exchange/ap/users/117202824925377048/statuses/117441156959507975"}, {"timestamp": "2026-10-14T20:47:39.528Z", "date_only": false, "value": "2026-10-14T20:47:39.528289Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mxug7ephnk2n", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "71474aff-a47a-4bb9-b3d3-06b5612967c8", "content": "Cisco Secure Email Gateway has a hole in it. CVE-2026-76519 is a relative path traversal zero-day that CISA added to the known exploited list today, October 14, and if you are running these gateways, your deadline to\u2026\n\n#vulnerability #phishing #infosec", "url": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mxug7ephnk2n"}, {"timestamp": "2026-10-14T20:55:57.609Z", "date_only": false, "value": "2026-10-14T20:55:57.609038Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxugo7iis22j", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "acd689f0-0116-447b-8d10-463c1c85e5bf", "content": "\ud83e\udd16 CVE-2026-76519 (CVSS 9.8): Cisco Secure Email Gateway AMP flaw. An unauthenticated sender emails a crafted attachment to write arbitrary files, then execute commands as root. Actively exploited, added to CISA KEV.\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-76519", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxugo7iis22j"}, {"timestamp": "2026-10-14T21:20:04.629Z", "date_only": false, "value": "2026-10-14T21:20:04.629305Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aipostdaily.bsky.social/post/3mxuhzcq6gq2r", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "75b14948-0e26-43e3-87a2-d6ff32b7c588", "content": "CISA added CVE-2026-76519 to its Known Exploited Vulnerabilities list (2026-10-14).\nCisco Secure Email Gateway Relative Path Traversal\n#infosec #KEV", "url": "https://bsky.app/profile/aipostdaily.bsky.social/post/3mxuhzcq6gq2r"}, {"timestamp": "2026-10-14T21:25:49.466Z", "date_only": false, "value": "2026-10-14T21:25:49.466497Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117441373724067302", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "e0af1e90-626c-4c1b-9cf2-9c0c600f2391", "content": "CVE-2026-76519 Cisco Secure Email Gateway Arbitrary File Write Vulnerability A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.\nThis vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.\nhttps://www.cve.org/CVERecord?id=CVE-2026-76519https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp#cisco #Cisco #CiscoSecureEmail#CVE_2026_76519#bot", "url": "https://infosec.exchange/users/cve/statuses/117441373724067302"}, {"timestamp": "2026-10-14T21:33:41Z", "date_only": false, "value": "2026-10-14T21:33:41Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6RC3-JWQ8-JM3V", "record": "GHSA-6RC3-JWQ8-JM3V", "field": "modified"}, {"timestamp": "2026-10-14T21:52:45.638Z", "date_only": false, "value": "2026-10-14T21:52:45.638343Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mxujtrkosi2q", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "4f6bf5d1-2723-4f65-90c3-db3c8664b1d9", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2026-76519: A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remo\u2026\nCVSS 9.8 \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-76519\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mxujtrkosi2q"}, {"timestamp": "2026-10-14T22:15:27.714Z", "date_only": false, "value": "2026-10-14T22:15:27.714516Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mxul4f2thd2a", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "728085b8-6d9d-4f2b-8ad7-eea5c9c8f6ba", "content": "\ud83d\udea8 NEW on CISA KEV \u2014 exploited in the wild\nCisco Secure Email Gateway: Cisco Secure Email Gateway Relative Path Traversal Vulnerability\nCVE-2026-76519 \u00b7 patch by 2026-10-17\n\ud83d\udd17 https://ninjasignal.ninja/intel/cve/CVE-2026-76519\n#KEV #cybersecurity #infosec", "url": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mxul4f2thd2a"}, {"timestamp": "2026-10-14T22:37:41.101Z", "date_only": false, "value": "2026-10-14T22:37:41.101410Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxume3y7wy2y", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "7e5ab071-df16-4db0-a20a-d187a5c808b3", "content": "Attackers are exploiting CVE-2026-76519 (CVSS 9.8), a critical Cisco Secure Email Gateway vulnerability allowing root RCE via attachments. Patch right now.\n\n#CVE202676519 #Cisco #EmailSecurity #AsyncOS #RCE #ZeroDay #Cybersecurity", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxume3y7wy2y"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1325", "record": "CERTFR-2026-AVI-1325", "field": "last_revision_date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1325", "record": "CERTFR-2026-AVI-1325", "field": "initial_release_date"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1325", "record": "CERTFR-2026-AVI-1325", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-15T00:17:35.375Z", "date_only": false, "value": "2026-10-15T00:17:35.375967Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/tomcat/statuses/117442049143324053", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "b74abb36-8274-49c8-9279-bd91012865eb", "content": "\u203c\ufe0f WARNING - Cisco confirms active, in-the-wild exploitation of a new critical flaw (CVE-2026-76519 // CVSS 9.8) in Cisco Secure Email Gateway.\nUnauthenticated attackers can achieve full root command execution simply by sending an email with a crafted attachment.\nDetails >> https://thehackernews.com/2026/10/cisco-warns-of-active-attacks.html", "url": "https://infosec.exchange/users/tomcat/statuses/117442049143324053"}, {"timestamp": "2026-10-15T00:23:53.346Z", "date_only": false, "value": "2026-10-15T00:23:53.346101Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxusbwjwak2m", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "fc6a8efe-9221-4751-b51a-2461ba00aa37", "content": "Cisco Secure Email Gateway\u306b\u30bc\u30ed\u30c7\u30a4 \u8106\u5f31\u6027\u300cCVE-2026-76519\u300d\u3001\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u3067\u60aa\u7528 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxusbwjwak2m"}, {"timestamp": "2026-10-15T00:30:28Z", "date_only": false, "value": "2026-10-15T00:30:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/cisco-rilevato-sfruttamento-in-rete-della-cve-2026-76519-relativa-a-secure-email-gateway", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "25e5fa69-565c-4b96-b200-34c53d93b161", "url": "https://www.acn.gov.it/portale/w/cisco-rilevato-sfruttamento-in-rete-della-cve-2026-76519-relativa-a-secure-email-gateway"}, {"timestamp": "2026-10-15T00:45:39Z", "date_only": false, "value": "2026-10-15T00:45:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheid-in-cisco-secure-email-gateway-met-actief-misbruik-update-nu", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "978c28be-cb67-4647-9cff-f2566265b678", "url": "https://www.ncsc.nl/alerts/kwetsbaarheid-in-cisco-secure-email-gateway-met-actief-misbruik-update-nu"}, {"timestamp": "2026-10-15T02:21:42Z", "date_only": false, "value": "2026-10-15T02:21:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.at/de/warnungen/2026/10/kritische-sicherheitslucke-in-cisco-secure-email-gateway-aktiv-ausgenutzt-updates-verfugbar-cve-2026-76519", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "2b451ecb-e2ca-44a0-bd0e-1d21e5b32776", "url": "https://www.cert.at/de/warnungen/2026/10/kritische-sicherheitslucke-in-cisco-secure-email-gateway-aktiv-ausgenutzt-updates-verfugbar-cve-2026-76519"}, {"timestamp": "2026-10-15T03:31:00.396Z", "date_only": false, "value": "2026-10-15T03:31:00.396736Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mxv4qltpxk2x", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "5790fb2f-24ec-4e0a-a8cb-a7701177d39d", "content": "Kritieke kwetsbaarheid in Cisco e-mail gateways wordt actief uitgebuit\n\nEen ernstige zero-day kwetsbaarheid, gedocumenteerd als CVE-2026-76519, wordt momenteel actief misbruikt door cybercriminelen om toegang te krijgen tot Cisco Secure Email Gateway-systemen. De kwetsbaarheid, met...", "url": "https://bsky.app/profile/newsfacts.bsky.social/post/3mxv4qltpxk2x"}, {"timestamp": "2026-10-15T03:56:57.762Z", "date_only": false, "value": "2026-10-15T03:56:57.762Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-76519", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T03:56:57.762Z", "date_only": false, "value": "2026-10-15T03:56:57.762Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-76519", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T04:00:57.183Z", "date_only": false, "value": "2026-10-15T04:00:57.183277Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxv6g5cg7t2o", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "2895836a-cfc7-4802-b2e0-fb66c26075af", "content": "~Cisa~\nCISA added four actively exploited flaws to its KEV Catalog, urging rapid remediation.\n-\nIOCs: CVE-2026-0322, CVE-2026-76519, CVE-2026-105133\n-\n#CVE #KEV #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mxv6g5cg7t2o"}, {"timestamp": "2026-10-15T05:16:29.843Z", "date_only": false, "value": "2026-10-15T05:16:29.843085Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxvcnaarod2m", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "601fd2ba-285e-48ca-8861-d02af17feeea", "content": "Cisco Email Gateway\u306b\u91cd\u5927\u306a\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u306a\u3057\u306e\u653b\u6483\u8005\u304croot\u6a29\u9650\u3092\u53d6\u5f97\u53ef\u80fd\u306b\n\nCisco\u306f\u3001Cisco Secure Email Gateway\u306b\u3001\u3059\u3067\u306b\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u8106\u5f31\u6027\u304c\u5b58\u5728\u3059\u308b\u3053\u3068\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u3092\u7a81\u304b\u308c\u308b\u3068\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u306e\u653b\u6483\u8005\u304c\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u66f8\u304d\u8fbc\u307f\u3001root\u6a29\u9650\u3067\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-76519\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u304a", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxvcnaarod2m"}, {"timestamp": "2026-10-15T06:00:42.656Z", "date_only": false, "value": "2026-10-15T06:00:42.656213Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mxvf4ckel72u", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "65b33687-2ecc-4b80-a6b4-4a45bbb1406c", "content": "Cisco SEG drops another root vulnerability \ud83d\udd73\ufe0f\n\nCisco urges customers to patch a critical zero-day (CVE-2026-76519) in its Secure Email Gateway, allowing remote root access via malicious email attachments.", "url": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mxvf4ckel72u"}, {"timestamp": "2026-10-15T06:40:55.416Z", "date_only": false, "value": "2026-10-15T06:40:55.416258Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxvhe7drv522", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "6555d761-4af4-4d56-af62-6be01d147c7c", "content": "Cisco\u3001Secure Email Gateway\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u8b66\u544a\n\nCisco\u793e\u306f\u6c34\u66dc\u65e5\u3001\u540c\u793e\u306eSecure Email Gateway\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u304c\u3001\u30cf\u30c3\u30ab\u30fc\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u9867\u5ba2\u306b\u8b66\u544a\u3057\u307e\u3057\u305f\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-76519\u300d\uff08CVSS\u30b9\u30b3\u30a2\u306f10\u70b9\u6e80\u70b9\u4e2d9.8\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306eAdvanced Malware Protect", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxvhe7drv522"}, {"timestamp": "2026-10-15T06:42:58.797Z", "date_only": false, "value": "2026-10-15T06:42:58.797084Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxvhhuii4g2g", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "fe415757-df5c-4270-9084-9d56fddeea84", "content": "CVE-2026-76519 (CVSS 9.8) enables unauthenticated attackers to write arbitrary files via crafted email attachments when specific AMP and Content Scanner Tools conditions are met.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxvhhuii4g2g"}, {"timestamp": "2026-10-15T06:44:12.214Z", "date_only": false, "value": "2026-10-15T06:44:12.214517Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mxvhjzvh7h2g", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "08bf7da3-a5f3-4d84-babd-b760cb93793c", "content": "CVE-2026-76519 (CVSS 9.8) enables unauthenticated attackers to write arbitrary files via crafted email attachments when specific AMP and Content Scanner Tools conditions are met.\n", "url": "https://bsky.app/profile/privpros.bsky.social/post/3mxvhjzvh7h2g"}, {"timestamp": "2026-10-15T07:23:09.443Z", "date_only": false, "value": "2026-10-15T07:23:09.443101Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mxvjppkoos2q", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "122f0866-52ee-4645-b1c1-2e4ac0d4ca20", "content": "[1/2] Cisco Secure Email Gateway: CVE-2026-76519 (CVSS 9.8) in active exploitation. Allegato crafted \u2192 file write, comandi root senza auth. Solo con File Reputation attivo e Content Scanner Tools < 25.3.0.5525. #infosec", "url": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mxvjppkoos2q"}, {"timestamp": "2026-10-15T07:23:09.871Z", "date_only": false, "value": "2026-10-15T07:23:09.871511Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mxvjppmr3s2q", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "2eeaaaea-a44f-4c58-9df3-978c3b5669c1", "content": "[1/2] Cisco Secure Email Gateway: CVE-2026-76519 (CVSS 9.8) in active exploitation. Allegato crafted \u2192 file write, comandi root senza auth. Solo con File Reputation attivo e Content Scanner Tools < 25.3.0.5525. #infosec", "url": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mxvjppmr3s2q"}, {"timestamp": "2026-10-15T07:26:58.896Z", "date_only": false, "value": "2026-10-15T07:26:58.896847Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mxvjwjwyo22o", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "f296e3b9-9630-416d-92da-4f1a85ec3829", "content": "\u3010\u7dca\u6025\u3011Cisco Secure Email Gateway \u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-76519 / CVSS 9.8\uff09\n\n\u8a8d\u8a3c\u306a\u3057\u3067root\u6a29\u9650\u3092\u596a\u308f\u308c\u308b\u304a\u305d\u308c\u3002Cisco\u306f\u60aa\u7528\u3092\u78ba\u8a8d\u6e08\u307f\u3067\u56de\u907f\u7b56\u306a\u3057\u3002\n\u5bfe\u51e6: Content Scanner Tools \u3092 25.3.0.5525 \u4ee5\u964d\u3078\u66f4\u65b0\u3002\n\nforsmile.jp/articles/cis...\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #CVE", "url": "https://bsky.app/profile/forsmile.jp/post/3mxvjwjwyo22o"}, {"timestamp": "2026-10-15T08:00:16.475Z", "date_only": false, "value": "2026-10-15T08:00:16.475115Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pidgeonai.bsky.social/post/3mxvls35tsl2y", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "fdb2c362-3485-42f8-af62-1e2de4d5a8e4", "content": "Cisco has patched an actively exploited zero-day in its Secure Email Gateway, CVE-2026-76519, letting unauthenticated attackers execute commands as root via a malicious email attachment. Ivanti also fixed a separate flaw under attack. Update now. #Technology #News", "url": "https://bsky.app/profile/pidgeonai.bsky.social/post/3mxvls35tsl2y"}, {"timestamp": "2026-10-15T09:30:41.320Z", "date_only": false, "value": "2026-10-15T09:30:41.320083Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alienrick.xyz/post/3mxvqsvgv3k23", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "14b80ca7-bc04-4524-bd0d-b08cd2cd9fbd", "content": "Look. @bleepingcomputer.com says @cisco.com's Secure Email Gateway got rooted by a crafted attachment. The AMP File Reputation gear that sniffs malware wrote files as root. CISA parked CVE-2026-76519 on KEV the same day. Your antivirus ate the burglar. (burp) day288.018", "url": "https://bsky.app/profile/alienrick.xyz/post/3mxvqsvgv3k23"}, {"timestamp": "2026-10-15T09:37:30.666Z", "date_only": false, "value": "2026-10-15T09:37:30.666097Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mxvr7y3wwf2g", "record": "cve-2026-76519", "field": "creation_timestamp", "uuid": "29ac1ad2-30be-416b-833e-abac770eb290", "content": "\ud83d\udcf0 Cisco Tambal Celah Keamanan Zero-Day Baru pada Secure Email Gateway yang Dieksploitasi dalam Serangan Aktif\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/15/cisco-tambal-celah-zero-day-secure-email-gateway-cve-2026-76519/\n\n#administrator #asyncos #cisa #cisco #cloud #cyberSe", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mxvr7y3wwf2g"}, {"timestamp": "2026-10-15T09:53:12.198Z", "date_only": false, "value": "2026-10-15T09:53:12.198413Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lotu.cc/post/3mxvs3yhvuc2l", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "7ac6f34c-d27d-4327-b569-864c5d98e743", "content": "Cisco says hackers are actively exploiting a critical flaw (CVE-2026-76519) in its Secure Email Gateway: a crafted email attachment gives unauthenticated attackers root. The irony writes itself \u2014 the box meant to stop malicious mail is owned by one.\n\nlotu.cc", "url": "https://bsky.app/profile/lotu.cc/post/3mxvs3yhvuc2l"}, {"timestamp": "2026-10-15T10:07:06.335Z", "date_only": false, "value": "2026-10-15T10:07:06.335244Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-c7405842-e94e2085f520e849", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "4e0372fa-3f49-48b2-8534-2765f65bb47c", "content": "Attackers exploit a critical Cisco email gateway flaw to gain root access. Cisco urges customers to update scanner tools and check for compromise. Cisco confirmed this week that threat actors are exploiting a critical vulnerability in Cisco Secure Email Gateway, tracked as CVE-2026-76519 with a CVSS score of 9.8. An attacker can exploit the flaw [\u2026]Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise", "url": "https://poliverso.org/objects/0477a01e-c7405842-e94e2085f520e849"}, {"timestamp": "2026-10-15T10:11:24.881Z", "date_only": false, "value": "2026-10-15T10:11:24.881024Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxvszmw4hsh2", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "13542a78-de51-4904-a40a-3ec1fda2c23b", "content": "Attackers exploit a critical Cisco email gateway flaw to gain root access. Cisco urges customers to update scanner tools and check for compromise. Cisco confirmed this week that threat actors are exploiting a critical vulnerability in Cisco Secure Email Gateway, tracked as CVE-2026-76519 with a [\u2026]", "url": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxvszmw4hsh2"}, {"timestamp": "2026-10-15T10:12:31.634Z", "date_only": false, "value": "2026-10-15T10:12:31.634505Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxvt6l2zuo2r", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "10588697-0bdf-4501-a82d-9bb8d4ca3491", "content": "Cisco says attackers are exploiting CVE-2026-76519 in Secure Email Gateway to write files and run commands as root. Customers should patch; CISA added the flaw to its KEV catalog.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxvt6l2zuo2r"}, {"timestamp": "2026-10-15T10:17:38.334Z", "date_only": false, "value": "2026-10-15T10:17:38.334600Z", "kind": "sighting", "label": "Seen", "source": "https://social.tchncs.de/users/gborn/statuses/117444408625025823", "record": "cve-2026-76519", "field": "creation_timestamp", "uuid": "79b57585-c95f-4ab8-b1fa-f6b5fe1eaccd", "content": "Nutzt wer #Cisco Secure Email Gateway (SEG)? Patchen \nhttps://borncity.com/blog/2026/10/15/angriffe-auf-kritische-schwachstelle-cve-2026-76519-in-cisco-secure-email-gateway/", "url": "https://social.tchncs.de/users/gborn/statuses/117444408625025823"}, {"timestamp": "2026-10-15T10:20:42.170Z", "date_only": false, "value": "2026-10-15T10:20:42.170372Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mxvtn6evrs24", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "cdbe5392-3065-4155-8a22-ad3902bd0214", "content": "Cisco has reported active exploitation of a critical vulnerability (CVE-2026-76519, CVSS 9.8) in its Secure Email Gateway, allowing attackers to execute commands as root via crafted email attachments.", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mxvtn6evrs24"}, {"timestamp": "2026-10-15T10:27:33.079Z", "date_only": false, "value": "2026-10-15T10:27:33.079001Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/johnwlittle.com/post/3mxvtyl2hwamc", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "3eaf5eb5-0039-4e68-a63c-89e300a78509", "content": "Cisco says CVE-2026-76519 in Secure Email Gateway is being actively exploited. Fixes are available; there is no workaround. Its Oct. 14 advisory includes affected configurations and recovery guidance.\nhttps://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-esa-afw-zqYJkjxp.html", "url": "https://bsky.app/profile/johnwlittle.com/post/3mxvtyl2hwamc"}, {"timestamp": "2026-10-15T10:36:25.591Z", "date_only": false, "value": "2026-10-15T10:36:25.591630Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxvujcmz3q2s", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "bca6ea1e-b030-4c38-a1de-d2419bd9c16f", "content": "Cisco says attackers are exploiting CVE-2026-76519 in certain Secure Email Gateway configurations to write files and potentially run commands as root. It urges customers to update Content Scanner Tools or install fixed AsyncOS releases.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxvujcmz3q2s"}, {"timestamp": "2026-10-15T12:05:02.022Z", "date_only": false, "value": "2026-10-15T12:05:02.022822Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxvzhqlh5i23", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "60e89947-0587-4fa0-9fee-d6112c3f1b13", "content": "\ud83d\udd34 Exploitation confirm\u00e9e (CISA KEV, ajouts du 14/10) \u00b7 2\n\u2022 Palo Alto Networks PAN-OS CVE-2026-0322, CVSS 8.6\n\u2022 Cisco Secure Email Gateway CVE-2026-76519, CVSS 9.8", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mxvzhqlh5i23"}, {"timestamp": "2026-10-15T13:20:50.441Z", "date_only": false, "value": "2026-10-15T13:20:50.441496Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117445129008885772", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "8a8c1bb1-e386-48e5-8439-a34436f180f5", "content": "Tracked as CVE-2026-76519, this vulnerability stems from a relative path traversal weakness in SEG's Advanced Malware Protection (AMP) feature, caused by improper handling of email attachments. https://www.bleepingcomputer.com/news/security/cisco-patches-actively-exploited-secure-email-gateway-zero-day/", "url": "https://infosec.exchange/users/jbhall56/statuses/117445129008885772"}, {"timestamp": "2026-10-15T13:20:57.569Z", "date_only": false, "value": "2026-10-15T13:20:57.569436Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mxw5pirc622e", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "c9be0da8-eb31-48a2-869e-1fdf95b2cc0a", "content": "Tracked as CVE-2026-76519, this vulnerability stems from a relative path traversal weakness in SEG's Advanced Malware Protection (AMP) feature, caused by improper handling of email attachments. www.bleepingcomputer.com/news/securit...", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3mxw5pirc622e"}, {"timestamp": "2026-10-15T13:47:19.470Z", "date_only": false, "value": "2026-10-15T13:47:19.470", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-76519", "record": "FKIE_CVE-2026-76519", "field": "lastModified"}, {"timestamp": "2026-10-15T16:02:40.786Z", "date_only": false, "value": "2026-10-15T16:02:40.786587Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/117445765362861606", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "4f8ebbea-fa8e-490b-be35-3cd69f6cfbef", "content": "New advisory.\nArctic Wolf: CVE-2026-76461: Active Exploitation of Cisco Secure Email Gateway Critical Zero-Day Vulnerability Immediate Mitigation Required https://arcticwolf.com/resources/blog/cve-2026-76461-active-exploitation-of-cisco-secure-email-gateway-critical-zero-day-vulnerability-immediate-mitigation-required/\nThere were other vulnerabilities that Cisco addressed yesterday\nCRITICAL: CVE-2026-20353, CVE-2026-76440, and CVE-2026-76441: Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm\nCRITICAL: CVE-2026-76519: Cisco Secure Email Gateway Arbitrary File Write Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp #infosec #Cisco #vulnerability", "url": "https://infosec.exchange/users/AAKL/statuses/117445765362861606"}, {"timestamp": "2026-10-15T17:00:01Z", "date_only": false, "value": "2026-10-15T17:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-76519", "field": "timestamps.recorded_at", "uuid": "dc52c89f-0cfe-4e6e-bb5b-df9228066f91", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-15T17:00:54.847Z", "date_only": false, "value": "2026-10-15T17:00:54.847256Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dc52c89f-0cfe-4e6e-bb5b-df9228066f91", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "92478e98-71fc-4e64-88fd-b5b9cf883942", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dc52c89f-0cfe-4e6e-bb5b-df9228066f91"}, {"timestamp": "2026-10-15T18:15:50.130Z", "date_only": false, "value": "2026-10-15T18:15:50.130647Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxwo6sifl22s", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "af65034b-3564-458e-bc1d-2cfe0f7e82c5", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-0322 \u00b7 30 people \ud83d\udd25\n2. CVE-2026-76519 \u00b7 30 people \ud83d\udd25\n3. CVE-2026-96951 \u00b7 11 people \ud83d\udd25\n4. CVE-2026-105133 \u00b7 10 people \ud83d\udd25\n5. CVE-2026-105134 \u00b7 8 people \ud83d\udd25\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxwo6sifl22s"}, {"timestamp": "2026-10-15T18:15:51.018Z", "date_only": false, "value": "2026-10-15T18:15:51.018509Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxwo6snxck2s", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "6eb11777-993c-4243-b365-72c70a2f8541", "content": "2. CVE-2026-76519 \u00b7 30 people \ud83d\udd25\n\ud83d\udfe5 Critical 9.8 \u00b7 Cisco Secure Email\n\nCisco Secure Email Gateway Arbitrary File Write Vulnerability", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxwo6snxck2s"}, {"timestamp": "2026-10-16T02:01:07.261Z", "date_only": false, "value": "2026-10-16T02:01:07.261526Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3mxxi6shly524", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "ed445e9b-8c41-468e-a297-2ae99e0a858e", "content": "SANS Stormcast Friday, October 16th, 2026: Panchan Crypto Mining Worm; Exploited 0-Days in Cisco Secure Email Gateway (CVE-2026-76519), Palo Alto PAN-OS (CVE-2026-0322) and Ivanti Connect Secure\n https://isc.sans.edu/podcastdetail/10140", "url": "https://bsky.app/profile/sansisc.bsky.social/post/3mxxi6shly524"}, {"timestamp": "2026-10-16T02:07:06.989Z", "date_only": false, "value": "2026-10-16T02:07:06.989127Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxxijjpyxn2u", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "02b24bc0-9c92-4c3e-b756-6d1fc419ed5c", "content": "\ud83d\udccc CVE-2026-76519 - A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to writ... https://www.cyberhub.blog/cves/CVE-2026-76519", "url": "https://bsky.app/profile/cyberhub.blog/post/3mxxijjpyxn2u"}, {"timestamp": "2026-10-16T03:52:46.257Z", "date_only": false, "value": "2026-10-16T03:52:46.257349Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trustlist.bsky.social/post/3mxxogh3kiu25", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "dd112b1e-493e-4cb5-9648-777ca8c18237", "content": "News 5/40\nCisco patches exploited root-access flaw in Secure Email Gateway\n\nCVE-2026-76519 scores 9.8, was found in Cisco's own scanning, and can be fixed without a restart by updating the Content Scanner Tools package.\n\n#infosec #cybersecurity\ntrustlist.uk/news/cisco-secure-\u2026", "url": "https://bsky.app/profile/trustlist.bsky.social/post/3mxxogh3kiu25"}, {"timestamp": "2026-10-16T04:01:32.413Z", "date_only": false, "value": "2026-10-16T04:01:32.413602Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aimainainnu.bsky.social/post/3mxxovvw22s2v", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "f6c28e66-ae37-4c05-b4c6-d7c3f8afe66b", "content": "root\u6a29\u9650\u53d6\u5f97\u3092\u8a31\u3059\u30b7\u30b9\u30b3\u88fd\u54c1\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027\u3001\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u308b\uff1aCVE-2026-76519\nCodebook - \u30de\u30ad\u30ca\u30ec\u30b3\u30fc\u30c9 \n\n... \u30de\u30eb\u30a6\u30a7\u30a2\u30fb\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2 \u00b7 \u30c0\u30fc\u30af\u30a6\u30a7\u30d6 \u00b7 \u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u00b7 \u8106\u5f31\u6027 \u00b7 \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8a8d\u8a3c \u00b7 \u898f\u7a0b\u30fb\u30ac\u30a4\u30c9\u30e9\u30a4\u30f3 \u00b7 \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6559\u80b2 \u00b7 \u7d44\u7e54\u4f53\u5236 ... \ncodebook.machinarecord.com/threatreport...", "url": "https://bsky.app/profile/aimainainnu.bsky.social/post/3mxxovvw22s2v"}, {"timestamp": "2026-10-16T05:37:21.574Z", "date_only": false, "value": "2026-10-16T05:37:21.574826Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mxxubhmbx42d", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "612d1ef5-bfc9-44b3-9b77-c37fe736a5f6", "content": "CVE-2026-76519: Critical Cisco Secure Email Gateway Zero\n\nThis article frames active exploitation as the paramount urgency, yet downplays the prior disclosure of similar CVEs like 2026-76461; if the vulnerability lies in flawed attachment processing, why is immediate root co\u2026\n\nvia SOC Prime Research", "url": "https://bsky.app/profile/arc-codex.com/post/3mxxubhmbx42d"}, {"timestamp": "2026-10-16T05:56:29.635Z", "date_only": false, "value": "2026-10-16T05:56:29.635730Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mxxvdotjw52l", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "71f326f4-13a6-4c7c-8d79-22fc6bc8d16d", "content": "\ud83d\udee1\ufe0f Revue cyber du 16 octobre :\n\n\u2022Collabora/Nextcloud : RCE CVE-2026-110447 exploit\u00e9e pour poser une backdoor.\n\u2022CERT-FR : Cisco AsyncOS CVE-2026-76519 exploit\u00e9 ; lot F5/Palo Alto/Juniper/Drupal.\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1325/", "url": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mxxvdotjw52l"}, {"timestamp": "2026-10-16T06:22:54.113Z", "date_only": false, "value": "2026-10-16T06:22:54.113465Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mxxwrfl6qssu", "record": "CVE-2026-76519", "field": "creation_timestamp", "uuid": "1961dea8-a1bc-4eb2-91a2-60a24e42792c", "content": "root\u6a29\u9650\u53d6\u5f97\u3092\u8a31\u3059\u30b7\u30b9\u30b3\u88fd\u54c1\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027\u3001\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u308b\uff1aCVE-2026-76519 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/48102/", "url": "https://bsky.app/profile/shiojiri.com/post/3mxxwrfl6qssu"}, {"timestamp": "2026-10-17T00:00:00Z", "date_only": true, "value": "2026-10-17", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2026-76519", "field": "evidence.0.details.due_date", "uuid": "fd000b21-e390-4a5d-be5b-2d5322e88cde", "status": {"status_reason": "confirmed", "exploited": true}}]}