CVE-2026-76442

HighCVSS 7.5

Published: 14/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 14/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

29th percentile - higher than 29% of all known CVEs

Summary

Cisco Secure Email Gateway and Cisco Secure Email and Web Manager contain vulnerabilities found during an internal security review, related to improper validation of specified quantity in input (CWE-1284).

Risk Assessment

Improper quantity validation may lead to unexpected software behavior, potentially allowing an attacker to destabilize or bypass device protections.

Recommendation

Apply the latest Cisco hardening releases for Secure Email Gateway and Secure Email and Web Manager that address these vulnerabilities.

Other vulnerabilities in Cisco Secure Email Gateway

CVE-2026-76519Critical
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. It is due to improper handling of email attachments when the file reputation service is enabled; an attacker could send an email with a crafted attachment through an affected device, potentially allowing arbitrary file writes and command execution with root privileges.

Original NVD description (English source)

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76442 are related to issues with improper validation of specified quantity in input that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-1284.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS