Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
10 / 10 results
criticalbug_reportVulnerabilityCisco Secure Email Gateway under active exploit for file write/RCE
Cisco Secure Email Gateway (formerly IronPort). Specific vulnerable versions not disclosed in available data. Affects on-premises appliances.
criticalbug_reportVulnerabilityCisco Secure Email Gateway RCE exploited in wild; root access via AMP
Cisco Secure Email Gateway (physical and virtual) running AsyncOS 15.5 before 15.5.5-014, all 16.0 versions, and 16.5 before 16.5.0-780, with AMP File Reputation service enabled and Content Scanner Tools earlier than 25.3.0.5525.
criticalbug_reportVulnerabilityCisco Secure Email Gateway under active attack via file write RCE flaw
Cisco Secure Email Gateway (physical and virtual appliances) running AsyncOS versions prior to 15.5.5-014 or 16.5.0-780, with File Reputation service enabled and Content Scanner Tools package older than version 25.3.0.5525.
criticalbug_reportVulnerabilityCisco SEG zero-day CVE-2026-76519 exploited for root command execution
Cisco Secure Email Gateway (SEG) appliances with File Reputation service enabled and Content Scanner Tools version earlier than 25.3.0.5525. Approximately 300 instances exposed online. Cloud instances already mitigated by Cisco.
criticalbug_reportVulnerabilityFortiMail vulnerability under active exploitation, immediate patching required
Fortinet FortiMail email security appliances. Specific affected versions not disclosed in available information. CVE identifier not yet assigned or not publicly disclosed.
criticalbug_reportVulnerabilityFortinet FortiMail zero-day CVE-2026-104286 exploited for file writes
Fortinet FortiMail versions 7.2.0-7.2.9, 7.4.0-7.4.8, 7.6.0-7.6.6, and 8.0.0-8.0.1. Unauthenticated remote attackers can write arbitrary files via path traversal and null byte injection flaws in HTTP/HTTPS handlers.
criticalbug_reportVulnerabilityFortinet FortiMail critical RCE (CVE-2026-104286) exploited in the wild
Fortinet FortiMail appliances. Specific affected versions not disclosed in available information. Vulnerability enables remote code execution or command execution on vulnerable devices.
highbug_reportVulnerabilityCisco Secure Email Gateway SQL injection requires urgent patching
Cisco Secure Email Gateway (formerly IronPort). Specific affected versions not disclosed in available information. SQL injection vulnerability allows potential unauthorized database access.
criticalbug_reportVulnerabilityCisco Secure Email Gateway CVE-2026-76461 exploited for root RCE
Cisco Secure Email Gateway (physical and virtual appliances) running AsyncOS Software versions 15.5 and earlier, 16.0, and 16.5. All device configurations are vulnerable. Cisco Secure Email and Web Manager and Secure Web Appliance are not affected.
criticalbug_reportVulnerabilityCisco Secure Email Gateway critical flaw unpatched, check for compromise
Cisco Secure Email Gateway and Cisco Secure Email and Web Manager. Specific affected versions not provided in advisory summary. No patch available as of December 17, 2025.