Skip to content

Cisco product

Secure Email Gateway

Alert
No CISA KEV deadline is open. CISA last added a Secure Email Gateway CVE on 14 Oct.

Tracked since 14 Sep · latest article 15 Oct · RSS · API

0Open KEV deadlines

None open

2Added to KEV · 90 days

of 2 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date2

Secure Email Gateway CVEs in CISA KEV with their federal deadlines. None is open.

Exploited Secure Email Gateway CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2026-76519Secure Email Gateway14 OctPassed 17 Oct9
In CISA KEVCVE-2026-76461Secure Email Gateway14 SepPassed 17 Sep10
Vendor CSV of 101 entries for CiscoAll 101 vendor entries, including other products.

Patch cadence and exploit odds

How often CISA adds Secure Email Gateway CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

0Q1 ’250Q2 ’250Q3 ’250Q4 ’250Q1 ’260Q2 ’261Q3 ’261Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20261
Q4 20261

Fix listed

0 of 1 CVE in coverage

1 CVE has no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-76461: 98.2th percentile, in CISA KEV050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-7646198.2

Coverage10 articles · all time

The latest 10 articles naming Secure Email Gateway, in the shared story grammar.

Full timeline
Quiet for 13 dayslast report 15 Oct10 articles7 outlets

10 articles from 7 outlets since 14 Sep. Quiet since 15 Oct.

Now14 Sep171819202115 OctFirst reportCISA · 14 Sep, 20:32Picked up againafter 5 days quiet
  • Mon 14 Sep, 20:32 UTC. CISA, first report. CISA Warns of Actively Exploited Cisco Email Gateway Flaw. Cites a CVE in CISA KEV.
  • Tue 15 Sep, 04:41 UTC. SecurityOnline, its first report on the story. Cisco Email Gateway Flaw Exploited to Gain Root Access via Email. Cites a CVE in CISA KEV.
  • Tue 15 Sep, 05:52 UTC. SecurityWeek, its first report on the story. Cisco Secure Email Gateways Hit by Actively Exploited Root Flaw. Cites a CVE in CISA KEV.
  • Tue 15 Sep, 13:13 UTC. Security Affairs, its first report on the story. Cisco Secure Email Gateways Hit by Actively Exploited Root Access Zero Day. Cites a CVE in CISA KEV.
  • Tue 15 Sep, 13:13 UTC. Rapid7, its first report on the story. Cisco Email Gateway Zero Day Let Attackers Gain Root Access Remotely. Cites a CVE in CISA KEV.
  • Tue 15 Sep, 21:21 UTC. Security Affairs. CISA Flags Critical Cisco Email Gateway Flaw Exploited in Attacks. Cites a CVE in CISA KEV.
  • Wed 16 Sep, 14:51 UTC. SOCRadar, its first report on the story. Cisco Warns Attackers Are Exploiting Critical Secure Email Gateway Flaw. Cites a CVE in CISA KEV.
  • Mon 21 Sep, 02:59 UTC. SecurityOnline. Cisco Warns of Actively Exploited Flaws Enabling Root Access. Cites a CVE in CISA KEV.
  • Wed 14 Oct, 19:26 UTC. The Hacker News, its first report on the story. Cisco Email Gateway Flaw Exploited to Run Commands as Root. Cites a CVE in CISA KEV.
  • Thu 15 Oct, 07:01 UTC. SecurityWeek. Attackers Exploit Critical Cisco Email Gateway Flaw to Gain Root Access. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
  • Quiet time, folded
Show all 10 articles as a list
  1. Mon 14 SepDay 01
    1. CISA Warns of Actively Exploited Cisco Email Gateway Flaw20:32 · CISA · official · First report · CISA alert · Known exploited CVE
  2. Tue 15 SepDay 15
    1. Cisco Email Gateway Flaw Exploited to Gain Root Access via Email04:41 · SecurityOnline · Known exploited CVE
    2. Cisco Secure Email Gateways Hit by Actively Exploited Root Flaw05:52 · SecurityWeek · Known exploited CVE
    Show 2 more from 15 Sep
    1. CISA Flags Critical Cisco Email Gateway Flaw Exploited in Attacks21:21 · Security Affairs · Known exploited CVE
  3. Wed 16 SepDay 21
  4. Quiet for 5 days

    Mon 21 SepDay 71
    1. Cisco Warns of Actively Exploited Flaws Enabling Root Access02:59 · SecurityOnline · Picked up again · Known exploited CVE
  5. Quiet for 3 weeks

    Wed 14 OctDay 301
    1. Cisco Email Gateway Flaw Exploited to Run Commands as Root19:26 · The Hacker News · Picked up again · Known exploited CVE
  6. Thu 15 OctDay 311

All CVEs in coverage1

Exploited first, then by EPSS

In the CVE tracker
  • Cisco Secure Email Gateway SQL Injection Vulnerability

    9.8Critical30% EPSS · 10 articles
Updated AboutDevelopersSign in