HighCVECVE-2026-76519
[CVE-2026-76519] Cisco Secure Email Gateway — Cisco Secure Email Gateway Relative Path Traversal Vulnerability
CISA KEV·Source published ·1 min read
What happened?
Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable.
Key details
- Citrix NetScaler ADC and Gateway have a memory buffer bounds vulnerability.
- The flaw could enable remote code execution or denial of service.
- Organizations must apply vendor mitigations and follow BOD 26-04 patching guidance.
- Running IOCs in the NetScaler console may help identify exploitation indicators.
Affected
- Citrix NetScaler ADC and NetScaler Gateway are affected.
Fixes and mitigations
- Apply mitigations per vendor instructions and BOD 26-04 guidance.
- Follow Citrix published guidance for mitigations.
What to look for
- IOCs provided for NetScaler console may indicate exploitation.
Summarised by SecOraLens from CISA KEV. Always read the original source before acting. How SecOraLens verifies advisories.