Cisco Secure Email Gateway hit by critical CVE-2026-76443 injection flaw

Cisco released fixes for Secure Email Gateway and Secure Email and Web Manager 15.5 and earlier to address injection vulnerability CVE-2026-76443. CERT-In rated the five-CVE hardening release as critical, warning that exploitation could lead to command execution and data access.

• Secure Email Gateway and Email and Web Manager 15.5 and earlier are affected
• CERT-In rated the five-CVE release as CRITICAL
• ZoomEye matched 1,781 instances by product fingerprint
• Cisco advises applying the fixed build and restricting management access