Cisco Secure Email Gateway SQL Injection Vulnerability
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that contains malicious SQL statements through an affected device. A successful exploit could allow the attacker to execute arbitrary SQL statements, leading to command execution with root privileges on the underlying operating system. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-76461US | critical9.8OT kritisch | KEV | ||
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with roo… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Security Vulnerability Policyexternal
- Cisco Secure Email Gateway SQL Injection Vulnerabilityself
- Cisco's Transition to a Risk-Based Vulnerability Disclosure Modelexternal
- Cisco Security Vulnerability Policyexternal
- fixed software releaseexternal
- Cisco Secure Email Gatewayexternal
- Cisco Secure Email and Web Managerexternal
- FAQ for Remote Access on Cisco ESA/WSA/SMAexternal
Behebungen (23)
- Behoben13.0.0-392
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben13.0.5-007
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben13.5.1-277
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben13.5.4-038
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.0.0-698
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.2.0-620
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.2.1-020
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben14.3.0-032
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.0.0-104
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.0.1-030
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.0.3-002
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.0.5-016
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.5.0-048
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.5.1-055
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.5.2-018
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.5.3-022
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben15.5.4-012
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben16.0.0-050
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben16.0.0-054
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben16.0.1-017
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben16.0.2-112
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben16.0.3-044
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Behoben16.0.4-016
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan