Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-76519

CVE-2026-76519CRITICAL

Cisco Secure Email Gateway Arbitrary File Write Vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0157   75.0   YES

AFFECTED
  Product             Versions      Fixed
  Cisco Secure Email  14.0.0-698 –  —

TIMELINE
  Aug 19  Reserved by cisco
  Oct 14  ADDED TO KEV — CVE-2026-76519 (Cisco Secure Email). Remediation due October 17, 2026.
  Oct 14  Published (CNA: cisco)
  Oct 18  DUE DATE PASSED — CVE-2026-76519 (Cisco Secure Email). CISA remediation deadline was October 17, 2026; still in catalog.

CWE-23 · CNA: cisco · CVSS v3.1 · 2 references · NVD status: Analyzed · KEV due October 17, 2026

Description

A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.

Lifecycle

Complete event history — 4 events, chronological
Date	Event	Detail
August 19, 2026	Reserved	Reserved by cisco
October 14, 2026	KEV ADDED	ADDED TO KEV — CVE-2026-76519 (Cisco Secure Email). Remediation due October 17, 2026.
October 14, 2026	Published	Published (CNA: cisco)
October 18, 2026	DUE DATE PASSED	DUE DATE PASSED — CVE-2026-76519 (Cisco Secure Email). CISA remediation deadline was October 17, 2026; still in catalog.

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Cisco	Cisco Secure Email	—	14.0.0-698	—

Weaknesses

CWE-23

References (2)

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp [Vendor Advisory]
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-76519 [US Government Resource]

Authoritative record: CVE-2026-76519 at cve.org

Vendors: cisco

Weaknesses: CWE-23

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-76519 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.