Multiple vulnerabilities in Cisco products (September 15, 2026)

Risks - Circumvention of security policy - Remote denial of service - Arbitrary code execution remotely - Remote code injection (XSS) - SQL Injection (SQLi) Affected Systems - AsyncOS for Secure Email Gateway versions 16.0.x prior to 16.0.4-3021 - AsyncOS for Secure Email Gateway versions 16.5.x prior to 16.5.0-780 - AsyncOS for Secure Email Gateway versions prior to 15.5.5-0141 - Secure Email and Web Manager versions 16.x prior to 16.5.0-429 - Secure Email and Web Manager versions prior to 15.5.5-006 - Secure Email Gateway versions 16.x prior to 16.5.0-780 - Secure Email Gateway versions prior to 15.5.5-014 Summary Multiple vulnerabilities have been discovered in Cisco products. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service, and SQL injection (SQLi). Cisco indicates that the vulnerability CVE-2026-76461 is actively being exploited. Indicators of Compromise Cisco recommends searching for suspicious SQL queries in the mail_logs. To this end, the vendor provides an example, non-exhaustive, command: cisco-esa> grep -i "COPY.*TO PROGRAM" [IronPort Text Mail Logs Log name - Default: mail_logs] Solutions Refer to the vendor's security bulletin for obtaining patches (see Documentation section). Documentation - Cisco security bulletin cisco-sa-esa-inj-2bLVGmhX of September 14, 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX - Cisco security bulletin cisco-sa-hardening-esa-dfCrfXkm of September 14, 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm - CVE Reference CVE-2026-20353 https://www.cve.org/CVERecord?id=CVE-2026-20353 - CVE Reference CVE-2026-76440 https://www.cve.org/CVERecord?id=CVE-2026-76440 - CVE Reference CVE-2026-76441 https://www.cve.org/CVERecord?id=CVE-2026-76441 - CVE Reference CVE-2026-76442 https://www.cve.org/CVERecord?id=CVE-2026-76442 - CVE Reference CVE-2026-76443 https://www.cve.org/CVERecord?id=CVE-2026-76443 - CVE Reference CVE-2026-76461 https://www.cve.org/CVERecord?id=CVE-2026-76461