{"vulnerability": "cve-2026-76461", "sightings": [{"uuid": "0c15c4af-0ff2-4745-8365-edbeb18bdfb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117270349040395789", "content": "ayy lmao Cisco CVE-2026-76461A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.\n\nIn September 2026, the Cisco PSIRT became aware of active exploitation of this vulnerability.\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX\n#cve #cisco #zeroday #eitw", "creation_timestamp": "2026-09-14T16:34:23.311586Z"}, {"uuid": "031ed0bf-525d-4126-bae7-792d33adabe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117270391382884208", "content": "Welcome to Monday and two new advisories from Cisco.\nCRITICAL: CVE-2026-20353, CVE-2026-76440, and CVE-2026-76441: Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm\nCRITICAL: CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX\nTwo more critical vulnerabilities on the 9th and the 11th https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #Cisco #infosec #vulnerability \n@cR0w", "creation_timestamp": "2026-09-14T16:42:48.618768Z"}, {"uuid": "ddfc0962-9e27-4053-8cfd-5f5940cfb97a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvin6is2qf2r", "content": "CVE-2026-76461 - cisco secure email\nCisco Secure Email Gateway can be tricked by a specially crafted email to run any command on the system with full administrative rights. The flaw exists because the email parser does\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-14T17:30:06.408188Z"}, {"uuid": "fe30ffc6-0323-4bff-93b8-a3972e872554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvipegpen52w", "content": "\ud83d\udea8 CVE-2026-76461 \u2014 CVSS 9.8 CRITICAL\n\nA vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76461\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T18:09:12.736313Z"}, {"uuid": "9c57ab86-3f9c-4d8b-98be-4c3684bda007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://www.acn.gov.it/portale/w/cisco-sfuttamento-in-rete-della-cve-2026-76461-relativa-a-secure-email-gateway", "content": "Cisco ha rilasciato aggiornamenti di sicurezza per sanare 6 vulnerabilit\u00e0, di cui 5 con gravit\u00e0 \"critica\" e una con gravit\u00e0 \"alta\", che interessano Cisco Secure Email Gateway, soluzione per la protezione e la gestione della posta elettronica, e Cisco Secure Email and Web Manager, piattaforma per la gestione centralizzata dei relativi servizi di sicurezza.", "creation_timestamp": "2026-09-14T19:00:34.572613Z"}, {"uuid": "8344c342-7dc8-4eef-8add-9bcf0581c203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvisxcx4xy25", "content": "\ud83d\uded1 CVE-2026-76461\nCisco Secure Email Gateway\nCVSS 9.8 / KEV \u2705\nTL;DR: A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gatewa\u2026\nhttps://cvesentinel.com/report/CVE-2026-76461?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-14T19:13:28.052207Z"}, {"uuid": "65a578ac-c17d-4514-927b-e53403c86a8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mvitz7j2d52u", "content": "Cisco confirms active exploitation of CVE-2026-76461 in Secure Email Gateway, CVSS 9.8: a crafted email gets an unauthenticated attacker root on the appliance. No workaround, fixed builds are out, and CISA added it to KEV today. sec.cloudapps.cisco.com/...", "creation_timestamp": "2026-09-14T19:32:25.578608Z"}, {"uuid": "c46d1e87-09e7-4a50-ad52-3ab116bd1fa9", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9ac436c8-102a-4823-ba5c-e8df968c9d63", "content": "", "creation_timestamp": "2026-09-14T20:00:02.074470Z"}, {"uuid": "fd7e5dab-d76a-4b0e-8042-c040a1d2ff15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-921", "content": "", "creation_timestamp": "2026-09-14T20:15:06.417851Z"}, {"uuid": "099436f6-f8cd-4e80-8d6f-653bbf8ca80c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mviywu7w6e25", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0914)\n\n\u26a0\ufe0f CVE-2026-76461 - Cisco Secure Email Gateway SQL Injection Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-09-14T21:00:34.869204Z"}, {"uuid": "6099dde0-d828-4f9f-982a-f195762e9665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mviyoxftkh2h", "content": "CRITICAL CISA KEV ALERT: CVE-2026-76461 targets Cisco Secure Email Gateway via SQL injection, granting root-level RCE. Active exploitation verified. Access our TSUITE brief for SIEM queries and hardening steps to secure your email perimeter.\n\nhttps://thecybermind.co/al1f", "creation_timestamp": "2026-09-14T20:56:10.595703Z"}, {"uuid": "d38ed0e3-27f3-422e-8e5f-e4c20f2c9dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvizk6tusl2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-76461: A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote\u2026\nCVSS 9.8 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-76461\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T21:11:23.782820Z"}, {"uuid": "0a55eb39-1b4e-459b-8a92-9999cecde776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mvjacmbogd2c", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-76461", "creation_timestamp": "2026-09-14T23:12:25.202449Z"}, {"uuid": "7a83573d-5f1b-4c41-b36b-8ba3ed244705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/windowsforum.com/post/3mvjcy7bczj27", "content": "Win11 OOBs KB5129195/9242/9194 fix RDP, WSL shares and USB audio across 23H2\u201326H1. CISA flags exploited Cisco SEG RCE CVE-2026-76461. Teams caption pop-out freezes on 24H2 build 26100.9168. +20 more stories; 36 joined", "creation_timestamp": "2026-09-15T00:00:18.488306Z"}, {"uuid": "1efce584-c2fb-40f6-9d02-80fd21750ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://www.acn.gov.it/portale/w/cisco-sfuttamento-in-rete-della-cve-2026-76461-relativa-a-secure-email-gateway", "content": "Cisco ha rilasciato aggiornamenti di sicurezza per sanare 6 vulnerabilit\u00e0, di cui 5 con gravit\u00e0 \"critica\" e una con gravit\u00e0 \"alta\", che interessano Cisco Secure Email Gateway, soluzione per la protezione e la gestione della posta elettronica, e Cisco Secure Email and Web Manager, piattaforma per la gestione centralizzata dei relativi servizi di sicurezza.", "creation_timestamp": "2026-09-15T01:00:33.956048Z"}, {"uuid": "5a201267-4a7b-4980-93c9-a10742d344a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117272820193403304", "content": "CRITICAL (CVSS 9.8): CVE-2026-76461 in Cisco AsyncOS for Secure Email Gateway lets unauthenticated attackers execute commands as root via crafted emails. Patch status unknown \u2014 monitor Cisco\u2019s updates. https://radar.offseq.com/threat/a-vulnerability-in-the-email-parsing-of-cisco-asyncos-software-for-cisco-secure-email-gateway-could-a5a1b3247d786df4 #OffSeq #Cisco #Vulnerability #EmailSecurity", "creation_timestamp": "2026-09-15T03:00:26.806287Z"}, {"uuid": "465051fe-084f-4637-afe9-0f248b261aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvjkoequkh2l", "content": "CVE-2026-76461 (CVSS 9.8) is a Cisco Secure Email Gateway vulnerability exploited in the wild. SQL injection grants root command execution. Patch now.\n\n#Cisco #EmailSecurity #CVE202676461 #SQLInjection #RCE #ExploitedInTheWild #AsyncOS #InfoSec #PatchNow #RootAccess", "creation_timestamp": "2026-09-15T02:17:58.123428Z"}, {"uuid": "1c5cf05f-dff0-4091-896b-00a2fcede48e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvjn2fu7lx2b", "content": "CRITICAL: Cisco AsyncOS for Secure Email Gateway flaw (CVE-2026-76461, CVSS 9.8) allows unauthenticated RCE via crafted emails. Patch status unknown \u2014 track vendor guidance. https://radar.offseq.com/threat/a-vulnerability-in-the-email-parsing-of-cisco-asyncos-software-for-cisco-secure-email-gatew...", "creation_timestamp": "2026-09-15T03:00:30.169602Z"}, {"uuid": "1b86e69a-77f5-4eb2-a33c-c16561ff34ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvjnmdto2t2j", "content": "Patch Cisco Secure Email Gateway now \u2014 CVE-2026-76461 (CVSS 9.8) SQLi gives root RCE, on CISA KEV. Fix: 15.5.5-0141/16.0.4-3021/16.5.0-780. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX", "creation_timestamp": "2026-09-15T03:10:30.627287Z"}, {"uuid": "37cb59a8-563f-4552-9d03-d3e5f7287439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvjqh5h7gh2y", "content": "~Cisa~\nCISA added an actively exploited Cisco Secure Email Gateway SQL injection flaw to its KEV Catalog.\n-\nIOCs: CVE-2026-76461\n-\n#CVE-2026-76461 #Cisco #ThreatIntel", "creation_timestamp": "2026-09-15T04:01:20.088239Z"}, {"uuid": "6477722e-6a30-4f43-b70d-801617d51f12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvjtva3mpb2h", "content": "Daily IT Security Digest \u2014 2026-09-15\nhttps://hackread.com/f5-breach-so...\n\n## 4. Cisco AsyncOS RCE in Secure Email Gateway (CRITICAL \u2014 CVSS 9.8)\n\nCisco has disclosed CVE-2026-76461, a critical vulnerability in AsyncOS for Secure Email Gateway that allows unauthenticated attackers to execute", "creation_timestamp": "2026-09-15T05:02:51.215975Z"}, {"uuid": "b5288c31-61ad-49ed-a06f-a45de1ee5e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T05:15:02.191096Z"}, {"uuid": "a1c1c318-a76d-46cf-b87b-edc62e125f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mvjumdpl4o2u", "content": "\u30cf\u30c3\u30ab\u30fc\u304cCisco Secure Email Gateway\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001root\u6a29\u9650\u3067\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\n\nCisco\u306f\u3001Secure Email Gateway\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306aSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306f\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u8a8d\u8a3c\u306a\u3057\u3067\u60aa\u7528\u53ef\u80fd\u3067\u3042\u308a\u3001\u653b\u6483\u8005\u306f\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30c7\u30d0\u30a4\u30b9\u4e0a\u3067\u4efb\u610f\u306e\u30b3\u30de\u30f3\u30c9\u3092root\u6a29\u9650\u3067\u5b9f\u884c\u3067\u304d\u3066\u3057\u307e\u3044\u307e\u3059\u3002 CVE-2026-76461", "creation_timestamp": "2026-09-15T05:15:46.765157Z"}, {"uuid": "37f503c4-e058-4a2a-8997-e3ec20ce59ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvjvi3wfzb2n", "content": "CVE-2026-76461 in Cisco Secure Email Gateway AsyncOS is a remotely exploitable, unauthenticated root-command zero-day actively used in attacks.\n", "creation_timestamp": "2026-09-15T05:31:18.170301Z"}, {"uuid": "dd2aad0a-4127-4b9d-972f-93c02b868a03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mvjyse2p6t2b", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-76461: \u26a0\ufe0f CVE-2026-76461: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-76461-a-vulnerability-in-the-email-parsing", "creation_timestamp": "2026-09-15T06:30:43.278935Z"}, {"uuid": "18862816-f6a2-413d-95ba-8bc4387c9cf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/forsmile.jp/post/3mvjystpiyk2j", "content": "\u3010\u7dca\u6025\u3011Cisco Secure Email Gateway\uff08CVE-2026-76461 / CVSS 9.8 CRITICAL\uff09\n\n\u7d30\u5de5\u3057\u305f\u30e1\u30fc\u30eb\u304c1\u901a\u5c4a\u304f\u3060\u3051\u3067\u3001\u672a\u8a8d\u8a3c\u306e\u653b\u6483\u8005\u304croot\u6a29\u9650\u3067\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u307e\u3059\u3002\u53d7\u4fe1\u8005\u304c\u958b\u304f\u5fc5\u8981\u3082\u3042\u308a\u307e\u305b\u3093\u3002Cisco\u81ea\u8eab\u304c2026\u5e749\u6708\u306b\u5b9f\u969b\u306e\u60aa\u7528\u3092\u78ba\u8a8d\u3057\u3066\u304a\u308a\u3001\u56de\u907f\u7b56\u306f\u3042\u308a\u307e\u305b\u3093\u3002\n\n\u5bfe\u51e6: AsyncOS\u309215.5.5-014\uff0f16.0.4-302\uff0f16.5.0-780\u3078\u3002\n\nforsmile.jp/articles/cis...", "creation_timestamp": "2026-09-15T06:30:59.867577Z"}, {"uuid": "02662e22-d13a-4322-8c81-ced99a14f68a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mvjyu7hucv2e", "content": "CVE-2026-76461 in Cisco Secure Email Gateway AsyncOS is actively exploited, enabling unauthenticated remote root command execution via crafted emails.\n", "creation_timestamp": "2026-09-15T06:31:46.281179Z"}, {"uuid": "56a7a1d4-10d6-4c0c-ab5a-ab7098d5b0a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mvjywh5utx2t", "content": "CVE-2026-76461 in Cisco Secure Email Gateway AsyncOS is actively exploited, enabling unauthenticated remote root command execution via crafted emails.\n", "creation_timestamp": "2026-09-15T06:33:01.847292Z"}, {"uuid": "3423df57-c0a4-4c1c-96ab-2391269870d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvjz7klh3o2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-20079: 22 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-85706: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-51990: 5 interactions\nCVE-2026-76461: 5 interactions\nCVE-2026-85706: 5 interactions\n", "creation_timestamp": "2026-09-15T06:38:07.004423Z"}, {"uuid": "03288b06-d153-420a-825d-9f9c0757bd27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mvjzujmpzz23", "content": "Everyone's talking about how fragile everything is this week. Look at the root RCE in Cisco Secure Email Gateway (CVE-2026-76461), those authentication bypasses in JFrog Artifactory, or the urgent warnings CISA put out\u2026\n\n#vulnerability #databreach #infosec", "creation_timestamp": "2026-09-15T06:49:50.588090Z"}, {"uuid": "1fe0eacd-0a37-4dc9-b793-6884a7abd0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://www.securityweek.com/root-rce-zero-day-in-cisco-secure-email-gateway-under-active-exploitation/", "content": "An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges.\n\nThe post Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation appeared first on SecurityWeek.", "creation_timestamp": "2026-09-15T07:00:35.828703Z"}, {"uuid": "0bfe4f56-4a42-45d2-a2ff-416f4eaf1314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mvk2j7zujg2g", "content": "\u6ce8\u610f\u559a\u8d77: Cisco Secure Email Gateway\u306b\u304a\u3051\u308bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-76461\uff09\n\nCisco\u306f2026\u5e749\u670815\u65e5\u3001Cisco Secure Email Gateway\u306eSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027CVE-2026-76461\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u7d30\u5de5\u3057\u305f\u30e1\u30fc\u30eb\u3092\u9001\u4fe1\u3059\u308b\u3053\u3068\u3067\u3001\u8106\u5f31\u6027\u306e\u3042\u308b\u30b7\u30b9\u30c6\u30e0\u3067root\u6a29\u9650\u3067\u306e\u4efb\u610f\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306b\u306a\u308a\u307e\u3059\u3002JPCERT/CC\u306f2026\u5e749\u6708\u306e\u60aa\u7528\u78ba\u8a8d\u3068\u56fd\u5185\u3067\u306e\u904e\u53bb\u4fb5\u5bb3\u4e8b\u6848\u3092\u5831\u544a\u3057\u3066\u304a\u308a\u3001\u5bfe\u8c61\u88fd\u54c1\u30e6\u30fc\u30b6\u30fc\u306f\u7dca\u6025\u306b\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u3068\u4fb5\u5bb3\u8abf\u67fb\u2026\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-09-15T07:01:24.992468Z"}, {"uuid": "e9ce9265-1b7f-454b-8ad6-64af3033eb4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/nvnb.misskey.io.ap.brid.gy/post/3mvk2mei775w2", "content": "\u3010JPCERT\u3011\u6ce8\u610f\u559a\u8d77: Cisco Secure Email Gateway\u306b\u304a\u3051\u308bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-76461\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77 (\u516c\u958b)\nhttps://www.jpcert.or.jp/at/2026/at260027.html\n\nNVNB\u306f\u8106\u5f31\u6027\u60c5\u5831\u306e\u95b2\u89a7\u3092\u652f\u63f4\u3059\u308b\u30b5\u30fc\u30d3\u30b9\u3067\u3059\nhttps://nvnb.blossomsarchive.com/", "creation_timestamp": "2026-09-15T07:03:22.562612Z"}, {"uuid": "e0d8d717-7344-49af-bc00-040e14550cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvk5s65j472q", "content": "\ud83e\udd16 CVE-2026-76461 (CVSS 9.8): critical Cisco Secure Email Gateway flaw actively exploited. Unauthenticated remote RCE as root via email parsing flaw. Patch now.\nhttps://thehackernews.com/2026/09/cisco-secure-email-gateway-flaw.html", "creation_timestamp": "2026-09-15T08:00:05.956463Z"}, {"uuid": "e54fb54c-db1d-4dca-8b35-2917694b6f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mvk724rzvkym", "content": "Cisco Secure Email Gateway\u306b\u304a\u3051\u308bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-76461\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77 https://www.jpcert.or.jp/at/2026/at260027.html", "creation_timestamp": "2026-09-15T08:22:28.026786Z"}, {"uuid": "1498546e-d52d-422a-97a0-61d778e2544e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-26", "content": "", "creation_timestamp": "2026-09-15T08:45:03.821381Z"}, {"uuid": "8f8ef560-dc10-4abc-a555-ee55def88689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "exploited", "source": "https://t.me/thehackernews/10055", "content": "\u203c\ufe0f Attackers are exploiting a Cisco Secure Email Gateway vulnerability that can let a crafted email trigger command execution as root.\n\nCisco has released fixes, and CISA added CVE-2026-76461 to its KEV catalog.\n\nHow the attack works \u2192 https://thehackernews.com/2026/09/cisco-secure-email-gateway-flaw.html", "creation_timestamp": "2026-09-15T09:00:04.318105Z"}, {"uuid": "96fb767e-e76d-48d5-ba78-8d48674061ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "exploited", "source": "https://t.me/information_security_channel/55918", "content": "Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation\nhttps://www.securityweek.com/root-rce-zero-day-in-cisco-secure-email-gateway-under-active-exploitation/\n\nAn unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges.\nThe post Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation (https://www.securityweek.com/root-rce-zero-day-in-cisco-secure-email-gateway-under-active-exploitation/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-15T09:00:04.378266Z"}, {"uuid": "94dec8af-4e38-4e08-8d2e-c6353e2f4f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mvkb5ij6za2x", "content": "\ud83d\udce2 [VULN] \u26a0\ufe0fInjection SQL exploit\u00e9e dans Cisco Secure Email Gateway - CVE-2026-76461\n\nLe 14 septembre 2026 \u00e0 16 h 00 UTC, Cisco a publi\u00e9 deux avis de s\u00e9curit\u00e9 sur sa passerelle de messagerie.\n\n#CVE #Cyberveille", "creation_timestamp": "2026-09-15T09:00:07.398743Z"}, {"uuid": "870e7773-1991-4f33-a321-22237521629d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/crawler.baldanders.info/post/3mvkdfec6d72i", "content": "\uff1e \u6ce8\u610f\u559a\u8d77: Cisco Secure Email Gateway\u306b\u304a\u3051\u308bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-76461\uff09\u306b\u95a2\u3059\u308b\u6ce8\u610f\u559a\u8d77  (\u516c\u958b)\nhttps://www.jpcert.or.jp/at/2026/at260027.html\n", "creation_timestamp": "2026-09-15T09:40:18.614078Z"}, {"uuid": "d5c7948f-55b5-4cfb-8ae5-e98bf7ddde75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvkdojubkw2c", "content": "Cisco Secure Email Gateway flaw CVE-2026-76461 is being actively exploited, letting unauthenticated attackers run root commands via crafted email. CISA added it to KEV. #Cisco #CISA #Fortinet", "creation_timestamp": "2026-09-15T09:45:27.206033Z"}, {"uuid": "5311e6f3-83a9-4724-9b98-30f0d71d7883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://thehackernews.com/2026/09/cisco-secure-email-gateway-flaw.html", "content": "Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild.\n\nThe vulnerability, tracked as CVE-2026-76461, carries a CVSS score of 9.8 out of a maximum of 10.0. It has been described as a case of insufficient validation in the email parsing logic that could allow an unauthenticated, remote attacker", "creation_timestamp": "2026-09-15T10:00:45.678029Z"}, {"uuid": "c66f0348-2f92-46cb-8c22-35920b697273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvkejgnvam24", "content": "Cisco warns of active exploitation of CVE-2026-76461, a critical zero-day in Secure Email Gateway appliances. A crafted email can grant root command execution. CISA added it to the KEV catalog. #Cisco #CVE202676461 #KEV", "creation_timestamp": "2026-09-15T10:00:29.138390Z"}, {"uuid": "c5a8803f-ab7a-4d88-b5c6-ceb4c3015edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvkgzpbd5s27", "content": "Cisco patched CVE-2026-76461, a critical zero-day in Secure Email Gateway actively exploited to run root commands without auth. CISA added it to KEV, and Cisco disclosed more critical flaws. #Cisco #CISA #KEV", "creation_timestamp": "2026-09-15T10:45:22.965134Z"}, {"uuid": "6ac241b5-a602-4d40-9cf0-d007fb85fa0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mvkinfjmkk2z", "content": "Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/09/15/c...\n\n#cybersecurity #cybersecuritynews #0day #emailsecurity #enterprise #SMBs @cisco.com", "creation_timestamp": "2026-09-15T11:14:19.818075Z"}, {"uuid": "ce8efb66-1abd-46fa-9d19-39f0e770a0b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mvkjlv7fnt2n", "content": "Cisco\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u30e1\u30fc\u30eb\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027(CVE-2026-76461)\u3092\u4fee\u6b63\n\nCisco\u306f\u6708\u66dc\u65e5\u3001Secure Email Gateway\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u304c\u30bc\u30ed\u30c7\u30a4\u306e\u30b7\u30fc\u30b1\u30f3\u30b7\u30e3\u30eb\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3(SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3)\u8106\u5f31\u6027(CVE-2026-76461)\u306b\u3088\u3063\u3066\u4fb5\u5bb3\u3055\u308c\u305f\u3053\u3068\u3092\u78ba\u8a8d\u3057\u305f\u3068\u767a\u8868\u3057\u307e\u3057\u305f\u3002 Cisco\u306e\u88fd\u54c1\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30b7\u30c7\u30f3\u30c8\u5bfe\u5fdc\u30c1\u30fc\u30e0(PSIRT)\u306f20", "creation_timestamp": "2026-09-15T11:31:20.835893Z"}, {"uuid": "48cab615-ba7a-4dfb-a145-cb5a93487115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mvkktvplnjut", "content": "Cisco $CSCO warns that CVE-2026-76461 in Secure Email Gateway is being actively exploited. Software updates are available; Cisco says there is no workaround.", "creation_timestamp": "2026-09-15T11:55:08.612230Z"}, {"uuid": "04443aec-3253-4155-b245-ddfbb45fc81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvkliblu3e23", "content": "\ud83d\udd17 CVE : CVE-2026-20353, CVE-2026-76440, CVE-2026-76441, CVE-2026-76442, CVE-2026-76443, CVE-2026-76461", "creation_timestamp": "2026-09-15T12:05:07.065705Z"}, {"uuid": "e636c0f4-06f3-442d-95af-eaeb446111e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mvknfbksc22n", "content": "Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)\n\nwww.helpnetsecurity.com/2026/09/15/c...\n\n#Kyberturvallisuus #Kyber #Tilannekuva", "creation_timestamp": "2026-09-15T12:39:18.282085Z"}, {"uuid": "2843e5f7-e10d-4044-be84-a8744b484526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76461", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvknpyeph42l", "content": "CVE-2026-76461: SQLi in Cisco AsyncOS lets unauthenticated attackers execute OS commands as root. In KEV as of Sept. 14\u2026 https://0daynews.com/articles/2026-09-15-cisco-secure-email-gateway-cve-2026-76461-rce/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-2082", "creation_timestamp": "2026-09-15T12:45:13.362331Z"}, {"uuid": "58df1497-80fe-492c-8d46-e946dc6e723f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://t.me/GithubRedTeam/102359", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-76461\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 06:13:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-76461 - Draft or TODO\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T13:00:05.510753Z"}, {"uuid": "af0d8cda-7307-41d1-953e-9da21ae5b6ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvkphlll2a2j", "content": "Cisco Secure Email Gateway CVE-2026-76461 (CVSS 9.8) lets a crafted inbound email execute commands as root on the appliance \u2014 apply Cisco's advisory updates immediately. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-15T13:16:18.390388Z"}, {"uuid": "bf92df24-4b26-44aa-8807-5f08f0e08742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mvkpi2ajph2q", "content": "Cisco has issued a warning about a zero-day vulnerability (CVE-2026-76461) in its Secure Email Gateway that allows remote attackers to execute arbitrary commands with root privileges. The flaw arises from a parsing issue in AsyncOS Software, enabling exploitation via malicious emails.", "creation_timestamp": "2026-09-15T13:16:34.035582Z"}, {"uuid": "2e330da7-f520-41a9-b105-fc1fb869602b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/approximately.bsky.social/post/3mvkwpimwu42a", "content": "Cisco Secure Email Gateway\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3001\u60aa\u7528\u78ba\u8a8d\u3067CISA\u304c\u91cd\u5927\u30ea\u30b9\u30af\u3068\u8a55\u4fa1\nCisco\u306e\u30e1\u30fc\u30eb\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u88fd\u54c1\u300cSecure Email Gateway\u300d\u306bCVSS\u30b9\u30b3\u30a29.8\u306e\u6df1\u523b\u306aSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\uff08CVE-2026-76461\uff09\u304c\u898b\u3064\u304b\u308a\u3001JPCERT/CC\u304c\u7dca\u6025\u60c5\u5831\u3092\u767a\u8868\u3057\u305f\u3002\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u7d30\u5de5\u3057\u305f\u30e1\u30fc\u30eb\u3092\u9001\u4fe1\u3059\u308b\u3053\u3068\u3067\u3001root\u6a29\u9650\u3067\u4efb\u610f\u306e\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002Cisco\u306f2026\u5e749\u6708\u306b\u60aa\u7528\u3092\u78ba\u8a8d\u2026\nhttps://internet.watch.impress.co.jp/docs/news/2141091.html", "creation_timestamp": "2026-09-15T15:26:00.320790Z"}, {"uuid": "c2c03308-7817-45bc-99ba-61bbca310758", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a16cbb03-0793-4e02-8eba-a5b7659656d1", "content": "", "creation_timestamp": "2026-09-15T16:00:30.357044Z"}, {"uuid": "c45a4c45-f860-4a9e-b55b-14039e19799b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mvkyntjqi42x", "content": "Nieuwe kwetsbaarheid in Cisco e-mail gateway maakt commando-uitvoering met root-\n\nEen ernstige zero-day kwetsbaarheid, bekend onder de identificatie CVE-2026-76461, is aangetroffen in de Cisco Secure Email Gateway. Deze kwetsbaarheid is actief uitgebuit voordat Cisco op maandag 14 september ...", "creation_timestamp": "2026-09-15T16:00:54.445461Z"}, {"uuid": "bf9c583e-e4ae-4d00-a346-e10457497d97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mvkyow55r4fd", "content": "Cisco $CSCO reports active exploitation of CVE-2026-76461 in Secure Email Gateway. Updates are available; Cisco says there is no workaround. AI-generated presenter and voice.", "creation_timestamp": "2026-09-15T16:02:24.288234Z"}, {"uuid": "9480e528-b48e-477a-bfc8-1b1c2cc5c599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mvkyv47d6y2m", "content": "Cisco\u3001\u30e1\u30fc\u30eb\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u3067\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u9867\u5ba2\u306b\u8b66\u544a\n\n\u51fa\u6240\u3084\u52d5\u6a5f\u304c\u4e0d\u660e\u306a\u653b\u6483\u8005\u304c\u3001Cisco Secure Email Gateway\u306e\u6df1\u523b\u306a\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3066\u3044\u308b\u3068\u3001\u5f53\u5c40\u3068\u7814\u7a76\u8005\u304c\u6708\u66dc\u65e5\u306b\u660e\u3089\u304b\u306b\u3057\u307e\u3057\u305f\u3002 \u3053\u306e\u8106\u5f31\u6027\u2014\u2014CVE-2026-76461\u2014\u2014\u306f\u3001Cisco\u304c\u6708\u66dc\u65e5\u306b\u8106\u5f31\u6027\u3092\u516c\u8868\u3057\u30d1\u30c3\u30c1\u3092\u63d0\u4f9b\u3059\u308b\u4ee5\u524d\u304b\u3089\u60aa\u7528\u3055\u308c\u3066\u304a\u308a\u3001\u8a8d\u8a3c\u3092\u7d4c\u3066\u3044\u306a\u3044\u9060\u9694\u306e\u653b\u6483\u8005\u304c\u8106", "creation_timestamp": "2026-09-15T16:04:55.725206Z"}, {"uuid": "1b9ccdd4-45f6-4021-adeb-9a8901dfb67f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://www.cert.se/2026/09/kritisk-sarbarhet-i-cisco-secure-email-gateway-utnyttjas-aktivt.html", "content": "", "creation_timestamp": "2026-09-15T16:16:34.770410Z"}, {"uuid": "ea70de3f-2d16-4cb4-aa32-08a1a7a3df2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/9/kritische-sicherheitslucke-in-cisco-secure-email-gateway-aktiv-ausgenutzt-updates-verfugbar", "content": "", "creation_timestamp": "2026-09-15T16:16:40.976603Z"}, {"uuid": "f442cdbd-fd2c-447e-b639-eca5e162a00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvkzqmf7rx2o", "content": "@sophossecurity.bsky.social\nCritical SQL injection is under active exploitation, enabling unauthenticated remote root command execution.\n-\nIOCs: CVE-2026-76461\n-\n#CVE202676461 #KEV #ThreatIntel", "creation_timestamp": "2026-09-15T16:20:18.536157Z"}, {"uuid": "cbfbad4f-eabf-40b1-8246-74667913b478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mvl22ncsvn2l", "content": "Actionable C-Suite threat intelligence and mitigation strategies for CVE-2026-76461, addressing active SQL injection exploitation vectors within enterprise Cisco Secure Email Gateway infrastructures. https://thecybermind.co/r5ry", "creation_timestamp": "2026-09-15T16:25:56.046611Z"}, {"uuid": "5e5da2ae-fa85-45a8-bfe0-e25c738121a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvl4axu3md2x", "content": "Cisco's email gateway kindly grants unauthenticated visitors complete root access through CVE-2026-76461. Just another Tuesday in IT.\n\n#CiscoFail #RootAccess", "creation_timestamp": "2026-09-15T17:05:15.384818Z"}, {"uuid": "d0026acf-b122-47ea-b300-edf568358750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvl4b26dok2g", "content": "Here we go again with Cisco Secure Email Gateway operators discovering unauthenticated prowlers can grab root privileges via CVE-2026-76461. Our delightful underlying OS environments bear the brunt of these arbitrary command antics whilst being actively exploited in the wild. Shi...\n\nRead full story", "creation_timestamp": "2026-09-15T17:05:18.717123Z"}, {"uuid": "a7b35af1-bf5a-4713-8464-b364d824869b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvl4p3mdc52f", "content": "Cisco patches critical, actively exploited zero-day (CVE-2026-76461) in Secure Email Gateways. Unauthenticated attackers can compromise devices via a crafted email. CISA has added it to the KEV catalog. #CyberSecurity #ZeroDay #Infosec #Cisco\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-15T17:13:08.960113Z"}, {"uuid": "e7885aa5-17ae-45f8-a800-16c62af998ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76461", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvl5zxskm32b", "content": "\ud83d\udccc Critical Zero-Day Vulnerability CVE-2026-76461 in Cisco Secure Email Gateway Under Active Exploitati... https://www.cyberhub.blog/article/32124-critical-zero-day-vulnerability-cve-2026-76461-in-cisco-secure-email-gateway-under-active-exploitation", "creation_timestamp": "2026-09-15T17:37:07.495673Z"}]}