# CVE-2026-76519: Cisco Secure Email Gateway relative path traversal

Source: https://junglewise.ai/threats/cve-2026-76519-cisco-secure-email-gateway-relative-path-traversal-vulnerability  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-14. Updated: 2026-10-14  
License: CC BY 4.0 with a link back

CVE-2026-76519 · Severity: critical · Exploited in the wild · Published 2026-10-14

Cisco Secure Email Gateway is an email security appliance that filters and protects email traffic for organizations. A relative path traversal flaw allows unauthenticated remote attackers to write arbitrary files to the server, potentially leading to system compromise, code execution, or unauthorized access to sensitive data.

Technologies: [Cisco Secure Email Gateway](https://junglewise.ai/threats/technologies/secure-email-gateway). Vendors: [Cisco](https://junglewise.ai/threats/vendors/cisco).

## Quick answers

**Is CVE-2026-76519 exploited in the wild?** Yes. CVE-2026-76519 is known to be exploited in the wild, first recorded on 14 October 2026. Treat it as urgent.

**How severe is CVE-2026-76519?** Critical severity, published 14 October 2026.

**Which products and versions are affected?** Cisco Secure Email Gateway.

**Is there a fix for CVE-2026-76519?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-76519 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-76519?** Check whether you run Cisco Secure Email Gateway. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a relative path traversal in Cisco Secure Email Gateway that permits an unauthenticated remote attacker to write arbitrary files on the underlying operating system via a crafted request. This could result in code execution or system takeover depending on file placement and permissions. The flaw is being actively exploited in the wild.

## Affected products

- Cisco Secure Email Gateway

## Timeline

- 2026-10-14: disclosed
- 2026-10-14: exploited

## Related threats

- [Cisco Secure Email Gateway SQL injection](https://junglewise.ai/threats/cve-2026-76461-cisco-secure-email-gateway-sql-injection)
- [Cisco Secure Email Gateway improper neutralization vulnerability](https://junglewise.ai/threats/cve-2026-76443-cisco-secure-email-gateway-improper-neutralization-vulnerability)
- [Cisco Secure Email Gateway improper input validation](https://junglewise.ai/threats/cve-2026-76442-cisco-secure-email-gateway-improper-input-validation)
- [Cisco Secure Email Gateway access control bypass](https://junglewise.ai/threats/cve-2026-76441-cisco-secure-email-gateway-access-control-bypass)
- [Cisco Secure Email Gateway path traversal](https://junglewise.ai/threats/cve-2026-76440-cisco-secure-email-gateway-path-traversal)