A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.
This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.
References
| Link | Resource |
|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp | Vendor Advisory |
| https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76519 | US Government Resource |
Configurations
Configuration 1 (hide)
| AND |
|
History
15 Oct 2026, 13:47
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:cisco:secure_email_gateway_c695:-:*:*:*:*:*:*:* cpe:2.3:a:cisco:secure_email_gateway_virtual_appliance_c100v:-:*:*:*:*:*:*:* cpe:2.3:a:cisco:secure_email_gateway_virtual_appliance_c300v:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:secure_email_gateway_c195:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:secure_email_gateway_c395:-:*:*:*:*:*:*:* cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:* cpe:2.3:a:cisco:secure_email_gateway_virtual_appliance_c600v:-:*:*:*:*:*:*:* |
|
| First Time |
Cisco secure Email Gateway C395
Cisco secure Email Gateway Virtual Appliance C300v Cisco Cisco asyncos Cisco secure Email Gateway Virtual Appliance C100v Cisco secure Email Gateway C695 Cisco secure Email Gateway C195 Cisco secure Email Gateway Virtual Appliance C600v |
|
| References | () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp - Vendor Advisory | |
| References | () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76519 - US Government Resource |
14 Oct 2026, 20:23
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
14 Oct 2026, 17:19
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-14 17:19
Updated : 2026-10-15 13:47
NVD link : CVE-2026-76519
Mitre link : CVE-2026-76519
CVE.ORG link : CVE-2026-76519
JSON object : View
Products Affected
cisco
- secure_email_gateway_virtual_appliance_c600v
- secure_email_gateway_c695
- secure_email_gateway_c195
- secure_email_gateway_virtual_appliance_c300v
- secure_email_gateway_c395
- asyncos
- secure_email_gateway_virtual_appliance_c100v
CWE
CWE-23
Relative Path Traversal