certeu-2026-017

certeu
Description

On 14 October 2026, Cisco published a security advisory addressing a critical vulnerability affecting the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway. This vulnerability could allow an unauthenticated, remote attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.<br> The Cisco PSIRT is aware of active exploitation of this vulnerability.<br> CERT-EU strongly recommends updating the Content Scanner Tools package or upgrading Cisco AsyncOS Software to a fixed release as soon as possible, prioritising appliances reachable from the internet. CERT-EU also recommends checking all affected appliances for indicators of compromise.<br>

Timeline
Published
Thu, 15 Oct 2026 11:38:20 CEST
Last Modified
Thu, 15 Oct 2026 11:38:20 CEST
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "datePublished": "Thu, 15 Oct 2026 11:38:20 CEST",
  "description": "On 14 October 2026, Cisco published a security advisory addressing a critical vulnerability affecting the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway. This vulnerability could allow an unauthenticated, remote attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.<br>\nThe Cisco PSIRT is aware of active exploitation of this vulnerability.<br>\nCERT-EU strongly recommends updating the Content Scanner Tools package or upgrading Cisco AsyncOS Software to a fixed release as soon as possible, prioritising appliances reachable from the internet. CERT-EU also recommends checking all affected appliances for indicators of compromise.<br>",
  "id": "CERTEU-2026-017",
  "link": "https://cert.europa.eu/publications/security-advisories/2026-017/",
  "source": "certeu",
  "title": "2026-017: Critical Vulnerability in Cisco Secure Email Gateway"
}
View JSON API Download JSON