CVE-2026-76441 – Cisco Secure Email and Web Manager
“When the console that controls your email security has an access-control gap, the gatekeeper becomes the open door.”
Cisco has released a hardening update for Cisco Secure Email and Web Manager that fixes multiple vulnerabilities found in an internal security review. They are tracked as CVE-2026-76441, which has a CVSS score of 9.8, Critical severity. The flaws come from improper access control (CWE-284) and allow elevation of privilege. An attacker could gain rights they should not have on the platform that manages an organization's email and web security.
This system sits at the center of email and web protection policy, so a compromise affects more than one device. Apply the update on the same day to close the access-control gaps before attackers can use them.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-284