VulnSocial

CVE-2026-76442Active Exploitation

MEDIUMCVSS 7.5 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch affected systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76442 are related to issues with improper validation of specified quantity in input that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-1284.

Back to dashboard
4.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-1284

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Active exploitation appears in 2 classified signals
  • Patch or workaround signal is available
  • 5 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 2 signals
  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 3d ago at 2 mentions (2026-09-14); latest day: 1
  • 5 total mentions across 4 days

Deep dive

Activity timeline5 mentions / 4d
01122Mentions · 2026-09-14: 2Mentions · 2026-09-15: 1Mentions · 2026-09-19: 1Mentions · 2026-10-15: 1Active Exploitation · 2026-09-14: 1Active Exploitation · 2026-10-15: 1Patch / Workaround · 2026-09-14: 1Patch / Workaround · 2026-09-15: 1Patch / Workaround · 2026-10-15: 1Technical Details · 2026-09-14: 2Technical Details · 2026-09-19: 109-1409-1509-1910-15
Signal classification3 categories
Active Exploitation
240.0%
Disclosure
240.0%
Patch
120.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-09-142
Active Exploitation1Disclosure1
2026-09-151
Patch1
2026-09-191
Disclosure1
2026-10-151
Active Exploitation1
Full discourse5 posts
  • にゃん☆たく/takumi.a@taku888infinity
    Active Exploitation

    ・CVE-2026-76461 Cisco Secure Email Gateway SQL Injection Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX 『（直訳）Cisco Secure Email Gateway 用の Cisco AsyncOS ソフトウェアのメール解析機能に脆弱性があり、認証されていないリモート攻撃者が、基盤となるオペレーティングシステム上でルート権限で任意のコマンドを実行できる可能性』 →KEV追加 ・CVE-2026-20353/CVE-2026-76440/CVE-2026-76441/CVE-2026-76442/CVE-2026-76443 Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm 『（直訳）これらの脆弱性は、社内テスト中に発見されました。そのうちの1つは、実際に悪用されていることが確認されています。』

    Post summary

    The post highlights multiple Cisco CVEs, including one added to the CISA KEV and another confirmed to be actively exploited, indicating real-world attacks.

    210521.9K
    12.0K followersView on X
  • Autumn Good@autumn_good_35
    Patch

    🚨🚨🚨 CVE-2026-20353 CVE-2026-76440 CVE-2026-76441 CVE-2026-76442 CVE-2026-76443 Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm

    Post summary

    The text announces Cisco's September 2026 Security Hardening Release addressing multiple CVEs in Secure Email Gateway and Secure Email and Web Manager, directing readers to a vendor advisory for remediation.

    00031483
    7.3K followersView on X
  • Autumn Good@autumn_good_35
    Active Exploitation

    🚨🚨🚨 『Two of them are known to be actively exploited.』 CVE-2026-20353 CVE-2026-76440 CVE-2026-76441 CVE-2026-76442 CVE-2026-76443 Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm

    Post summary

    The text warns that two of the five listed Cisco CVEs are actively exploited in the wild and directs readers to a Cisco Security Hardening Release for remediation.

    10000465
    7.3K followersView on X
  • zoomeyebot@zoomeyebot
    Disclosure

    🚨 Cisco Secure Email Gateway CVE-2026-76442: Unbounded Quantity Input Drives Remote Denial of Service Critical Vulnerability Alert! Cisco Secure Email Gateway / Cisco Secure Email and Web Manager is affected by CVE-2026-76442. 🔍 Identify Targets via ZoomEye: Search Dork: app="Cisco Secure Email Gateway" Exposure: 1.8k instances identified globally. ZoomEye Search Link: 👉 https://www.zoomeye.ai/searchResult?q=YXBwPSJDaXNjbyBTZWN1cmUgRW1haWwgR2F0ZXdheSI%3D #Infosec #CyberSecurity #ZoomEye

    Post summary

    The text discloses CVE-2026-76442 as a remote denial-of-service vulnerability in Cisco Secure Email Gateway caused by unbounded quantity input, provides a ZoomEye dork to identify ~1.8k exposed instances globally, but does not reference any PoC, exploit, patch, or active exploitation.

    0000046
    23 followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚠️ HIGH — CVE-2026-76442 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cis… CVSS 7.5 Full analysis → https://sec.kaitan.id/cves/CVE-2026-76442 #Cisco #CyberSecurity #InfoSec

    Post summary

    The text announces CVE-2026-76442 affecting Cisco Secure Email Gateway with CVSS 7.5 and links to a full analysis page, but does not mention a patch, PoC, exploit tool, or active exploitation.

    0000068
    88 followersView on X

Explore more

Back to dashboard