ID:13135 - Exploit for Relative Path Traversal in Secure Email Gateway - CVE-2026-76519

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.

The vulnerability exists due to improper handling of email attachments in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway when processing email messages. A remote attacker can send an email containing a crafted attachment through an affected device to write arbitrary files and execute commands with root privileges on the underlying operating system.

Exploitation requires the File Reputation service to be enabled and assigned to a mail policy.

Note, the vulnerability is being actively exploited in the wild.

Remediation