FAIL › dossier
Secure Email Gateway
PRODUCT· dossier confidence 80%
Secure Email Gateway is an email security product with a critical track record of high-severity vulnerabilities, including unauthenticated remote code execution and SQL injection flaws that allow attackers to execute arbitrary root commands on the underlying OS.
PROFILE
CategoryEmail SecurityWhat they doSecure Email Gateway is a product designed to secure email communications.
SECURITY POSTURE
The product has a critical security posture with multiple high-severity vulnerabilities including unauthenticated remote code execution and SQL injection flaws that allow arbitrary root command execution.
Notable failures
- CVE-2026-76519: Unauthenticated RCE via relative path traversal
- CVE-2026-76461: Unpatched SQL injection enabling arbitrary root commands
Patterns: Unpatched critical vulnerabilities; Remote code execution via unauthenticated attacks
FAILURE HISTORY · 2
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2026-10-14 | CVE-2026-76519 | high | An unauthenticated remote attacker can write arbitrary files on the underlying OS via a relative path traversal flaw in Cisco Secure Email Gateway. |
| 2026-09-14 | CVE-2026-76461 | high | Cisco Secure Email Gateway suffered an unpatched SQL injection flaw allowing remote attackers to execute arbitrary root commands. |
DOSSIER SOURCES
- Bridge returned error 0! (20741) · 127.0.0.1
- Bridge returned error 0! (20741) · 127.0.0.1
- Bridge returned error 0! (20741) · 127.0.0.1
Open questions: Company identity and ownership · Product version history · Patch response timeline
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-10-15 04:26:04.842931+00:00