GoKawiilCisco fixes actively exploited root-privilege zero-day in Secure Email Gateway
Cisco has released a patch for CVE-2026-76519, a path traversal bug in Secure Email Gateway's Advanced Malware Protection feature that lets unauthenticated attackers send a malicious email attachment to gain root-level command execution on unpatched devices. Cisco's security team said it detected active exploitation of the flaw in October 2026 and published indicators of compromise for administrators to check their systems. The vulnerability only affects devices with File Reputation enabled and running Content Scanner Tools versions earlier than 25.3.0.5525.