As cited
Copy frozen at (site build).
vulnerabilities
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added CVE-2026-76461, a SQL injection vulnerability in Cisco Secure Email Gateway, to its Known Exploited Vulnerabilities (KEV) Catalog on September 14, 2026, based on evidence of active exploitation. The CVE carries a CVSS score of 9.8 and poses significant risk to federal systems. Federal Civilian Executive Branch agencies must prioritize remediation of KEV Catalog vulnerabilities under Binding Operational Directive 26-04.
Why it matters: Cisco Secure Email Gateway users and federal agencies must immediately assess whether systems were compromised before patching, as this actively exploited SQL injection grants total control post-exploitation.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added CVE-2026-76461, a SQL injection vulnerability in Cisco Secure Email Gateway with a CVSS score of 9.8, to its Known Exploited Vulnerabilities Catalog on September 14, 2026 based on evidence of active exploitation. The agency emphasizes that federal agencies must prioritize rapid remediation of high-risk vulnerabilities under Binding Operational Directive 26-04 and recommends all organizations adopt risk-based vulnerability management practices.
Why it matters: Federal agencies must immediately patch CVE-2026-76461 on publicly exposed Cisco Secure Email Gateway systems; all other organizations should prioritize this critical SQL injection vulnerability given its active exploitation and CVSS 9.8 severity.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added CVE-2026-76461, a SQL injection vulnerability in Cisco Secure Email Gateway with a CVSS score of 9.8, to its Known Exploited Vulnerabilities Catalog on September 14, 2026 based on evidence of active exploitation. The agency emphasizes that federal agencies must prioritize rapid remediation of high-risk vulnerabilities under Binding Operational Directive 26-04 and recommends all organizations adopt risk-based vulnerability management practices.
Why it matters: Federal agencies must immediately patch CVE-2026-76461 on publicly exposed Cisco Secure Email Gateway systems; all other organizations should prioritize this critical SQL injection vulnerability given its active exploitation and CVSS 9.8 severity.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added CVE-2026-76461, a SQL injection vulnerability in Cisco Secure Email Gateway with a CVSS score of 9.8, to its Known Exploited Vulnerabilities Catalog on September 14, 2026 based on evidence of active exploitation. The agency emphasizes that federal agencies must prioritize rapid remediation of high-risk vulnerabilities under Binding Operational Directive 26-04 and recommends all organizations adopt risk-based vulnerability management practices.
Why it matters: Federal agencies must immediately patch CVE-2026-76461 on publicly exposed Cisco Secure Email Gateway systems; all other organizations should prioritize this critical SQL injection vulnerability given its active exploitation and CVSS 9.8 severity.
- Source published
- First seen by Cybersecurity Tracker