Cisco has disclosed a critical SQL injection vulnerability in Cisco AsyncOS Software for Secure Email Gateway that attackers are actively exploiting to run arbitrary commands as root on vulnerable appliances. Tracked as CVE-2026-76461, the flaw carries a CVSS v3.1 score of 9.8 and stems from insufficient validation in the product’s email-parsing logic. According to Cisco, […]
The post Hackers Exploit Critical Cisco Secure Email Gateway Flaw to Execute Commands as Root appeared first on Cyber Security News.