← Global Threat Landscape

CVE-2026-76519

CWE-23

Final Priority

Critical

92.7

Raw RPS

Description

A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email attachments when the file reputation service is enabled. An attacker could exploit this vulnerability by sending an email that contains a crafted attachment through an affected device. A successful exploit could allow the attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.

Source: NVD

Signals

CVSS
9.8
Critical · v3.1
EPSS
1.57%
Probability of exploitation in the next 30 days (FIRST) · Percentile: 75.2%
CISA KEV
In CISA KEV since Oct 2026
Confirmed exploitation in the wild (CISA KEV)
Upstream fix commit
No verified fix commit in DevSecure data
Sources: MoreFixes, FreshFixes
SSVC inputs (CISA)
Exploitation: Active · Automatable: Yes · Technical impact: Total
CISA's assessed SSVC inputs, not a decision. A decision also needs your mission and public well-being context. Context only; not part of the RPS score.
Weakness
CWE-23
Published
14 Oct 2026
Last modified 15 Oct 2026

How to read these signals: RPS · EPSS · CISA KEV · Data sources

What would change this priority?

  • ↓Would become High if the EPSS percentile falls below 69.3%, causing the raw RPS to fall below 90.

Explains the published RPS formula and priority rules; it doesn't change the score. How priority works

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2026-76519

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 23 Oct 2026, 05:17 UK time

This product uses the NVD API but is not endorsed or certified by the NVD. Data sources and licences

CVE-2026-76519 · RPS 92.7 · DevSecure Intelligence