15 September 2026
Reference: CVE-2026-76461
1. What is being reported?
The issue is a vulnerability in Cisco's Secure Email Gateway software that processes incoming emails. Attackers can send a malicious email that tricks the system into running harmful commands with the highest level of access, potentially taking over the device completely.
2. What this means in plain English
If your organisation uses Cisco Secure Email Gateway, hackers could remotely break in without needing a password by sending a harmful email. This could lead to loss of control over your email system and possibly wider network damage.
3. Could this affect a small business?
Small organisations using Cisco Secure Email Gateway are at risk, especially if the device is connected to the internet. If you do not use this Cisco product, or your email is handled by a cloud service provider, you are less likely to be affected but should still check with your provider.
4. What to do now
- Contact your IT provider or Cisco support immediately to check if your Secure Email Gateway is affected.
- Apply any security updates or patches Cisco provides as soon as possible.
- If updates are not yet available, follow Cisco's recommended mitigations to reduce risk.
- Review your email gateway's exposure to the internet and consider additional protections or temporary service changes.
5. Ask your IT provider
Can you confirm if our Cisco Secure Email Gateway is affected by CVE-2026-76461 and what steps have been taken to protect us from this vulnerability?
6. Bottom line
If you use Cisco Secure Email Gateway, act now to update or secure it to prevent hackers from taking control via email.
Information based on CISA KEV, NVD and multiple reputable security news reports.