Cisco
Relative Path Traversal Vulnerability
Exploited in the wild. CISA added it to its Known Exploited Vulnerabilities list on 14 Oct 2026.
CVE-2026-76519Critical9.8Black Shard advisory published
Reading the vendor advisory
Black Shard's team can check your exposure to CVE-2026-76519 and take the fix off your plate.
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.
Black Shard's team can check your exposure, take a fix off your plate or step in on a live incident.
Chance of exploitation in the next 30 days
6.2%
EPSS score from FIRST
Updated 13 Nov 2026, 11:54 UTC, 31 of 36 sources answering.
CISA Known Exploited Vulnerabilities, NVD, CVE.org, CIRCL Vulnerability-Lookup, GitHub Advisory Database (CC BY 4.0), OSV (CC BY 4.0), RansomLook (CC BY 4.0, enriched by Black Shard), SEC EDGAR, HHS breach portal, Have I Been Pwned (CC BY 4.0), Texas Attorney General, California Attorney General, Delaware Department of Justice, Vermont Attorney General, GDELT Project, Cloudflare status, abuse.ch SSLBL (CC0), CISA ICS advisories, NCSC UK (OGL v3.0), CERT-EU (CC BY 4.0), NCSC New Zealand (CC BY 4.0), MISP galaxy (CC0), OAIC determinations (CC BY 4.0), abuse.ch Feodo Tracker (CC0), Spamhaus DROP (Spamhaus DROP terms), blocklist.de, CINS Army, CERT-FR (Licence Ouverte 2.0), Red Hat Security Data (CC BY 4.0), ENISA EUVD, Microsoft MSRC, JVN iPedia, FIRST EPSS, IODA, GeoNames (CC BY 4.0), Natural Earth, Wikidata, Regional Internet Registries (delegation statistics), Protomaps, OpenStreetMap contributors (ODbL), NASA GIBS. Items link to their sources, except leak-site claims, which are never linked. This product uses the NVD API but is not endorsed or certified by the NVD.
Built on open-source software under the MIT licence. Map data from Natural Earth, NASA GIBS, Protomaps and OpenStreetMap contributors.
© 2026 Black Shard Pty LtdABN 66 696 910 773