https://vulnerability.circl.lu/sightings/feed 2026-09-16T17:19:13.476648+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/2a61b3be-f8c5-43f9-ba76-141a37234830/export 2026-09-16T17:19:13.509766+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2a61b3be-f8c5-43f9-ba76-141a37234830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvnjcxgtgo2f", "content": "Cisco patches critical, actively exploited zero-day (CVE-2026-76461) in Secure Email Gateways. Unauthenticated attackers can compromise devices via a crafted email. CISA has added it to the KEV catalog. #CyberSecurity #ZeroDay #Infosec #Cisco\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-16T16:04:19.400511Z"} 2026-09-16T16:04:19.400511+00:00 https://vulnerability.circl.lu/sighting/afe65fd2-f63d-4d14-b150-20de46931c1f/export 2026-09-16T17:19:13.511055+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "afe65fd2-f63d-4d14-b150-20de46931c1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117281562596675005", "content": "\ud83d\udcf0 Cisco Patches Actively Exploited Zero-Day in Secure Email Gateways\nCisco patches critical, actively exploited zero-day (CVE-2026-76461) in Secure Email Gateways. Unauthenticated attackers can compromise devices via a crafted email. CISA has added it to the KEV catalog. #CyberSecurity #ZeroDay #Infosec #Cisco\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisco-patches-actively-exploited-zero-day-in-secure-email-gateway/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-16T16:03:47.074726Z"} 2026-09-16T16:03:47.074726+00:00 https://vulnerability.circl.lu/sighting/5661351d-e42f-4796-9f80-8440046a80ee/export 2026-09-16T17:19:13.511146+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5661351d-e42f-4796-9f80-8440046a80ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://t.me/bdufstecru/3459", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Cisco AsyncOS \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b Cisco Secure Email \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435\u043c \u043c\u0435\u0440 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0437\u0430\u043f\u0440\u043e\u0441\u0430 SQL. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\n\nBDU:2026-14615\nCVE-2026-76461\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0432\u0435\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442);\n- \u0430\u043d\u0430\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0436\u0443\u0440\u043d\u0430\u043b\u0430 mail_logs \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u0443\u0442\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \"cisco-esa> grep -i \"COPY.*TO PROGRAM\" [\u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430 \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e: mail_logs]\";\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f (\u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f, \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438) \u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0438 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0438\u0437 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.", "creation_timestamp": "2026-09-16T16:00:03.537607Z"} 2026-09-16T16:00:03.537607+00:00 https://vulnerability.circl.lu/sighting/455096bb-58ad-45e7-9ffc-9cdc9a99ddd2/export 2026-09-16T17:19:13.511229+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "455096bb-58ad-45e7-9ffc-9cdc9a99ddd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/inferlume.bsky.social/post/3mvni3e5vsc2r", "content": "One crafted email can be root on Cisco Secure Email Gateway CVE-2026-76461. ScreenConnect sessions, FMC managers, and a Chrome chain share the same night.\n\nFull Inferlume Report: inferlume.com/reports/dail...\n\n#CyberSecurity #CTI #CISA #Cisco #KEV #ThreatIntelligence", "creation_timestamp": "2026-09-16T15:42:13.693115Z"} 2026-09-16T15:42:13.693115+00:00 https://vulnerability.circl.lu/sighting/0c623f18-af52-4e87-8eea-ecdef66b54f6/export 2026-09-16T17:19:13.511292+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0c623f18-af52-4e87-8eea-ecdef66b54f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76461", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mvncprrjhu2j", "content": "One crafted email gives root on Cisco Secure Email Gateway. CVE-2026-76461 is under active exploitation. Patch the edge you can't take offline.\n#ThreatIntel #CriticalInfrastructure\nhttps://threat-intelligence.redeyesecurity.com/blog/cisco-secure-email-gateway-cve-2026-76461-root-rce-2026", "creation_timestamp": "2026-09-16T14:06:14.411218Z"} 2026-09-16T14:06:14.411218+00:00 https://vulnerability.circl.lu/sighting/e6a4cfee-a882-4229-9e9b-2303e5c4fa75/export 2026-09-16T17:19:13.511354+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e6a4cfee-a882-4229-9e9b-2303e5c4fa75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76461", "type": "seen", "source": "https://bsky.app/profile/gadgetchecks.bsky.social/post/3mvn7trnxrd24", "content": "CISCO SECURE EMAIL GATEWAY: CVE-2026-76461 WIRD AKTIV AUSGENUTZT\n\nhttps://gadgetchecks.de/cisco-secure-email-gateway-cve-2026-76461-wird-aktiv-ausgenutzt/\n\n#technikaktuell #cisco #cybersicherheit #sicherheitsl\u00fccke #emailsecurity #gadgetchecks", "creation_timestamp": "2026-09-16T13:14:47.187824Z"} 2026-09-16T13:14:47.187824+00:00 https://vulnerability.circl.lu/sighting/82880ff0-170f-4e2a-a463-31dd436ecff3/export 2026-09-16T17:19:13.511417+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "82880ff0-170f-4e2a-a463-31dd436ecff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mvn552lu2c2x", "content": "Cisco patches actively exploited email gateway zero-day (CVE-2026-76461) - Help Net Security www.helpnetsecurity.com/2026/09/15/c...", "creation_timestamp": "2026-09-16T12:26:30.161685Z"} 2026-09-16T12:26:30.161685+00:00 https://vulnerability.circl.lu/sighting/fb64ee0a-2aa2-4ba2-a4f5-f5e9cdbceaec/export 2026-09-16T17:19:13.511480+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fb64ee0a-2aa2-4ba2-a4f5-f5e9cdbceaec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvn3aw4lyc2d", "content": "Cisco Warns of Ongoing Exploitation of Critical Email Gateway Zero-Day\n\nCisco warns of a critical zero-day in Secure Email Gateway, exploited in the wild to gain root access through malicious emails. Cisco disclosed a critical zero-day, tracked as CVE-2026-76461 (CVSS score of 9.8\u2026\n#hackernews #news", "creation_timestamp": "2026-09-16T11:52:39.223704Z"} 2026-09-16T11:52:39.223704+00:00 https://vulnerability.circl.lu/sighting/b62f2234-d7cd-41c9-8fec-ec1d28ea53ce/export 2026-09-16T17:19:13.511540+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b62f2234-d7cd-41c9-8fec-ec1d28ea53ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mvmrsg7z4l2r", "content": "Cisco email gateway rooted by an email \ud83d\udea8\n\nCisco Secure Email Gateway has a critical flaw (CVE-2026-76461) allowing root access via a malicious email, with active exploitation underway.\n\nEmail security should probably be more secure than that.", "creation_timestamp": "2026-09-16T09:03:29.340380Z"} 2026-09-16T09:03:29.340380+00:00 https://vulnerability.circl.lu/sighting/1d7766b2-01eb-401d-ae0f-b80fc503b53d/export 2026-09-16T17:19:13.511610+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "1d7766b2-01eb-401d-ae0f-b80fc503b53d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-76461", "type": "seen", "source": "https://www.cert.dk/news/2026-09-16/Cisco-advarer-om-aktivt-udnyttet-0-dagssaarbarhed-i-mailgateways", "content": "", "creation_timestamp": "2026-09-16T08:45:11.017150Z"} 2026-09-16T08:45:11.017150+00:00