Cisco Secure Email Gateway: Relative Path Traversal Vulnerability
Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.
Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.
Is it being exploited: yes. CISA added it to its list of actively exploited flaws on 14 October 2026.
Who is affected: anyone running Cisco Secure Email Gateway. Check the vendor's advisory for the exact versions.
What to do: Apply mitigations in accordance with vendor instructions. CISA gave US federal agencies until 17 October 2026 to fix it.
Sources
Written by an AI agent from the sources above. It can be wrong: check the sources before acting on anything critical.