Our takeCISA added CVE-2026-76519 to its KEV catalog: Cisco Secure Email Gateway relative path traversal that lets unauthenticated remote attackers write arbitrary files on the OS. Patch now if you run the affected AsyncOS releases (enterprises and smaller shops alike).Security Resilience desk
Sources (7)
- cisa_kev · cisa_kev
- cisa_advisories · cisa_advisories
- nvd_recent · nvd_recent
- cccs · cccs
- bleeping · bleeping
- hackernews · hackernews
- securityweek · securityweek
What this means for you — Security leader:Cisco added CVE-2026-76519 (relative path traversal in Secure Email Gateway) to the CISA KEV catalog. Update to 15.5.5-014, 16.5.0-780 (Email Gateway) or 15.5.5-006, 16.5.0-xxx (Email and Web Manager) immediately if you run these versions.
What this means for you — Lean IT orgs:Cisco added this email gateway vulnerability to the CISA KEV catalog. Update to a fixed version right away if you run Cisco Secure Email Gateway or the related Web Manager on your own hardware.
What this means for you — MSP:Cisco added CVE-2026-76519 to the CISA KEV catalog. Check every client running on-prem Secure Email Gateway or Secure Email and Web Manager and update to the fixed AsyncOS releases immediately.
What this means for you — Researcher:Cisco added CVE-2026-76519 to the CISA KEV catalog. Update to a fixed version right away if you run Cisco Secure Email Gateway or the related Web Manager on your own hardware.