CVE-2026-76461

CVSS

—

EPSS

—

CISA KEV

Added 2026-09-14, due 2026-09-17

Exploitation

No report

Public exploits

4 repositories

State

Unknown

Coverage

• 

  ● Actively exploitedRapid715 Sept, 12:22

  CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild↗(opens the publisher's site in a new tab)

  Overview On September 14, 2026, Cisco published a security advisory for CVE-2026-76461, a critical SQL injection vulnerability affecting Cisco AsyncOS Software for Cisco Secure Email Gateway. The vulnerability has a reported CVSS v3.1 base score of 9.8 and could allow an unauthenticated, remote…

• ● Actively exploitedJPCERT15 Sept, 06:42

  注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)↗(opens the publisher's site in a new tab)

• ● Actively exploitedCERT-FR15 Sept, 00:00

  Multiples vulnérabilités dans les produits Cisco (15 septembre 2026)↗(opens the publisher's site in a new tab)

  De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une injection SQL (SQLi). Cisco indique que la vulnérabilité CVE-2026-76461 est...

• ● Actively exploitedCISA advisories & alerts14 Sept, 12:00

  CISA Adds One Known Exploited Vulnerability to Catalog↗(opens the publisher's site in a new tab)

  CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses…

What we observed

1. 24 Sept, 12:44poc publishedpoc-in-github
2. 24 Sept, 12:26poc publishedpoc-in-github
3. 24 Sept, 12:13poc publishedpoc-in-github
4. 24 Sept, 11:50poc publishedpoc-in-github
5. 24 Sept, 11:50kev addedcisa-kev