Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability

Cisco has issued an advisory warning of active exploitation of a critical vulnerability in Cisco Secure Email Gateway. The flaw allows an unauthenticated attacker to write arbitrary files to the appliance's operating system simply by sending a crafted email attachment through the gateway. If the attack succeeds, the attacker can execute commands with root privileges on the affected appliance. The vulnerability requires no login credentials, making it particularly dangerous. Cisco Secure Email Gateway is widely used by organizations to filter inbound and outbound email for spam and malware. The active exploitation status elevates the urgency for organizations to patch or mitigate immediately. The advisory was released on a Wednesday, indicating a mid-cycle emergency disclosure likely due to observed in-the-wild attacks.