Cisco security advisory (AV26-921)

Imported from official source

Cybersecurity Classified by Officially

Serial Number: AV26-921
Date: September 14, 2026

As of September 14, 2026, Cisco is affected by vulnerabilities in the following products:

  • Cisco AsyncOS for Cisco Secure Email Gateway
    • Prior to 15.5.5-014
    • Prior to 16.0.4-302
    • Prior to 16.5.0-780
  • Cisco Secure Email Gateway
    • Prior to 15.5.5-014
    • Prior to 16.5.0-780
  • Cisco Secure Email and Web Manager
    • Prior to 15.5.5-006
    • Prior to 16.5.0-429

On September 14, 2026, Cisco stated that CVE-2026-76461 is being actively exploited.

On September 14, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-76461 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

This is an extract. The publication continues at the source.

Read the original at the source: https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-921

Officially imported this from Canadian Centre for Cyber Security’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization
Canadian Centre for Cyber Security — imported from official source
Official source
https://www.cyber.gc.ca/api/cccs/rss/v1/get?feed=alerts_advisories&lang=en ATOM
Imported
September 20, 2026 19:52
Versions
1 recorded
Identity
https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-921

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.