#asyncos

2 articles

An email with the wrong attachment reaches root on a Cisco mail gateway, and the remedy is a new appliance

2026-10-24Security

CVE-2026-76519 is a 9.8 that Cisco found in its own scanning and is now seeing exploited. There is no workaround, and the advisory warns that upgrading a compromised appliance destroys the evidence.

The thing that scans attachments for malware is exploited by an attachment, and it runs as root

2026-10-15Security

An unauthenticated attacker sends an email to a Cisco Secure Email Gateway, and a path traversal in the malware-scanning path writes arbitrary files and executes commands as root. Scored 9.8, exploited, and there is a fix that needs no reboot.