Cisco Secure Email Gateway Relative Path Traversal Vulnerability

CVE-2026-76519 is a relative path traversal vulnerability affecting Cisco Secure Email Gateway (ESA). An unauthenticated, remote attacker could exploit this flaw to write arbitrary files on the underlying operating system, potentially leading to full system compromise. The vulnerability is tracked by CISA and is subject to BOD 26-04, which mandates prioritizing security updates based on risk. Cisco has published a security advisory detailing the issue and remediation steps. The vulnerability is rated High criticality. Organizations using Cisco Secure Email Gateway are advised to apply patches immediately and conduct forensic triage as outlined in CISA guidance.