CVE-2026-76519

An unauthenticated remote attacker can write arbitrary files on the underlying OS via a relative path traversal flaw in Cisco Secure Email Gateway.

This relative path traversal vulnerability allows unauthenticated remote attackers to write arbitrary files on the underlying operating system, enabling potential code execution and system compromise. DIB organizations must patch this immediately as it is actively exploited in the wild, posing a severe risk to email infrastructure and data confidentiality. Failure to patch exposes the organization to ransomware and data breaches, violating CMMC/NIST 800-171 requirements for timely patching and system hardening.

Shame score — A critical path traversal flaw allowing arbitrary file writes was actively exploited in the wild before a patch existed, demonstrating severe negligence in patch management and vulnerability disclosure.