Cisco patches new Secure Email Gateway zero-day exploited in attacks

Cisco has released patches for a newly discovered zero-day vulnerability in its Secure Email Gateway (SEG) product. The flaw allows remote unauthenticated attackers to execute arbitrary commands with root privileges, making it critically severe. The vulnerability was actively exploited in the wild at the time of disclosure. No authentication is required to exploit the flaw, significantly lowering the barrier for attackers. Cisco's patch addresses the issue and customers are urged to update immediately. This is described as 'another' zero-day, suggesting prior vulnerabilities in the same product have been exploited. The impact is broad given the widespread enterprise use of Cisco's email security appliances.