Detections
Analytics

Cisco Secure Email Gateway SQLi (cisco-sa-esa-inj-2bLVGmhX)

critical Nessus Plugin ID 346259

Synopsis

The remote device is missing a vendor-supplied security patch.

Description

According to its self-reported version, Cisco Secure Email Gateway is affected by a SQL injection vulnerability.

 - A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that contains malicious SQL statements through an affected device. A successful exploit could allow the attacker to execute arbitrary SQL statements, leading to command execution with root privileges on the underlying operating system.
 (CVE-2026-76461)

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

Solution

Upgrade to the relevant fixed version referenced in Cisco bug ID CSCwu56234

See Also

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwu56234

http://www.nessus.org/u?b37c3cb0

Plugin Details

Severity: Critical

ID: 346259

File Name: cisco-sa-esa-inj-2bLVGmhX.nasl

Version: 1.2

Type: Combined

Family: CISCO

Published: 9/16/2026

Updated: 9/17/2026

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Critical

Score: 9.5

Percentile: 99.87

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-76461

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:cisco:email_security_appliance

Required KB Items: Host/AsyncOS/Cisco Email Security Appliance/Version

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 9/14/2026

Vulnerability Publication Date: 9/14/2026

Reference Information

CVE: CVE-2026-76461

CISCO-SA: cisco-sa-esa-inj-2bLVGmhX

CISCO-BUG-ID: CSCwu56234