CVE-2026-76519
Received
Received - Intake
File Write Vulnerability in Cisco Secure Email Gateway
Vulnerability report for CVE-2026-76519, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-14
Last updated on: 2026-10-14
Assigner: Cisco Systems, Inc.
Description
Description
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.
This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Cisco | Cisco | Secure Email 14.0.0-698 |
| Cisco | Cisco | Secure Email 13.5.1-277 |
| Cisco | Cisco | Secure Email 13.0.0-392 |
| Cisco | Cisco | Secure Email 14.2.0-620 |
| Cisco | Cisco | Secure Email 13.0.5-007 |
| Cisco | Cisco | Secure Email 13.5.4-038 |
| Cisco | Cisco | Secure Email 14.2.1-020 |
| Cisco | Cisco | Secure Email 14.3.0-032 |
| Cisco | Cisco | Secure Email 15.0.0-104 |
| Cisco | Cisco | Secure Email 15.0.1-030 |
| Cisco | Cisco | Secure Email 15.5.0-048 |
| Cisco | Cisco | Secure Email 15.5.1-055 |
| Cisco | Cisco | Secure Email 15.5.2-018 |
| Cisco | Cisco | Secure Email 16.0.0-050 |
| Cisco | Cisco | Secure Email 15.0.3-002 |
| Cisco | Cisco | Secure Email 16.0.0-054 |
| Cisco | Cisco | Secure Email 15.5.3-022 |
| Cisco | Cisco | Secure Email 16.0.1-017 |
| Cisco | Cisco | Secure Email 15.5.4-012 |
| Cisco | Cisco | Secure Email 16.0.4-016 |
| Cisco | Cisco | Secure Email 15.0.5-016 |
| Cisco | Cisco | Secure Email 16.0.2-112 |
| Cisco | Cisco | Secure Email 16.0.3-044 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-23 | The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory. |
