← Incidents
INCIDENT 468Exploited vulnerabilityHIGH CONFIDENCESourced
CVE-2026-20079 added to CISA KEV: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
<p>CISA has added one new vulnerability to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation.</p> <ul> <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-76461" target="_blank">CVE-2026-76461</a> Cisco Secure Email Gateway SQL Injection Vulnerability</li> </ul> <p>This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.</p> <p><a href="https://www.cisa.gov/news-events/directives/bod-26-04-implem…
Last evidence update
16 OCT 2026 · 05:00 UTC
Source count
29
Status
high confidence
GovernmentCVE-2026-20079CVE-2026-76461CVE-2026-76460CVE-2026-87886CVE-2026-76504CVE-2026-76519
Observation history
How this record has evolved as evidence accumulated.
10 SEP · 05:22 UTC
Initial report
10 SEP · 05:22 UTC
Second independent source
10 SEP · 05:22 UTC
Confidence upgraded
10 SEP · 05:22 UTC
Status changed
15 SEP · 05:22 UTC
Second independent source
15 SEP · 05:22 UTC
Related CVE identified (CVE-2026-76461)
15 SEP · 05:22 UTC
Second independent source
15 SEP · 05:22 UTC
Summary updated from new evidence
16 SEP · 05:22 UTC
Second independent source
17 SEP · 05:22 UTC
Second independent source
17 SEP · 05:22 UTC
Second independent source
17 SEP · 05:22 UTC
Related CVE identified (CVE-2026-76460)
17 SEP · 05:22 UTC
Second independent source
17 SEP · 05:22 UTC
Related CVE identified (CVE-2026-87886)
18 SEP · 05:22 UTC
Second independent source
19 SEP · 05:22 UTC
Second independent source
24 SEP · 05:22 UTC
Second independent source
25 SEP · 05:22 UTC
Second independent source
28 SEP · 05:22 UTC
Second independent source
29 SEP · 05:22 UTC
Second independent source
30 SEP · 05:22 UTC
Second independent source
01 OCT · 05:22 UTC
Second independent source
01 OCT · 05:22 UTC
Related CVE identified (CVE-2026-76504)
01 OCT · 05:22 UTC
Second independent source
01 OCT · 05:22 UTC
Second independent source
02 OCT · 05:22 UTC
Second independent source
03 OCT · 05:22 UTC
Second independent source
06 OCT · 05:22 UTC
Second independent source
07 OCT · 05:00 UTC
Second independent source
08 OCT · 05:00 UTC
Second independent source
09 OCT · 05:00 UTC
Second independent source
13 OCT · 05:00 UTC
Second independent source
14 OCT · 05:00 UTC
Second independent source
15 OCT · 05:00 UTC
Second independent source
15 OCT · 05:00 UTC
Related CVE identified (CVE-2026-76519)
15 OCT · 05:00 UTC
Second independent source
16 OCT · 05:00 UTC
Second independent source
Evidence
NVD · primary
CVE-2026-20079 (CRITICAL)
CISA KEV · high
CVE-2026-20079 added to CISA KEV: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
CISA KEV · high
CVE-2026-76461 added to CISA KEV: Cisco Secure Email Gateway SQL Injection Vulnerability
CISA · high
CISA Adds One Known Exploited Vulnerability to Catalog
CISA KEV · high
CVE-2026-76460 added to CISA KEV: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
CISA · high
CISA Adds Two Known Exploited Vulnerabilities to Catalog
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
CISA KEV · high
CVE-2026-76504 added to CISA KEV: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
CISA · high
CISA Adds One Known Exploited Vulnerability to Catalog
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
CISA KEV · high
CVE-2026-76519 added to CISA KEV: Cisco Secure Email Gateway Relative Path Traversal Vulnerability
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
JPCERT/CC · high
注意喚起: Cisco Secure Email GatewayにおけるSQLインジェクションの脆弱性（CVE-2026-76461）に関する注意喚起 (公開)
Related incidents
INCIDENT 924 · CVE-2026-105134 added to CISA KEV: Ahsay AhsayCBS Command Injection VulnerabilityINCIDENT 560 · CVE-2026-87886 added to CISA KEV: Acronis Backup Incorrect Default Permissions VulnerabilityINCIDENT 467 · CVE-2025-25249 added to CISA KEV: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability