CVE-2026-76519: Relative Path Traversal in Cisco Cisco Secure Email

This vulnerability arises from improper handling of email attachments in Cisco Secure Email Gateway's AMP feature. An attacker can exploit this by sending a specially crafted email attachment to an affected device, enabling arbitrary file write and command execution with root privileges on the host OS. The vulnerability affects multiple specific versions of Cisco Secure Email as listed. The CVSS 3.1 base score is 9.8, indicating critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an unauthenticated remote attacker to execute arbitrary commands with root privileges on the underlying operating system of the affected Cisco Secure Email Gateway device. This can lead to full system compromise, data loss, and disruption of email security services.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should consider disabling the file reputation service or applying any recommended temporary mitigations from Cisco. Monitor Cisco's advisories closely for patches or updates addressing this vulnerability.