Cisco email security boxes can be rooted by... an email

{
  "signal_id": "7cb7b60a-3ddf-7c26-b52b-5ff33315a264",
  "signal_type": "news",
  "signal_subtype": "security_incident",
  "detected_at": "2026-09-15T16:01:00+00:00",
  "company": {
    "name": "Cisco",
    "domain": "cisco.com"
  },
  "data": {
    "url": "https://www.theregister.com/security/2026/09/15/cisco-email-security-boxes-can-be-rooted-by-an-email/5296604",
    "title": "Cisco email security boxes can be rooted by... an email",
    "excerpt": "security Attackers already exploiting the critical flaw, and Cisco warns they may be able to cover their tracks once they're in Criminals are exploiting a critical Cisco Secure Email Gateway flaw that can turn a malicious email into root access. The vulnerability, tracked as CVE-2026-76461, carries a 9.8 CVSS score and affects physical and virtual Secure Email Gateway appliances regardless of their configuration. Cisco says there are no workarounds , so patching is the only fix. The bug lies in how Cisco's AsyncOS software handles incoming email. An attacker doesn't need to log in: they can send a booby-trapped message through a vulnerable gateway and, if the exploit works, run commands as root. Which is not exactly what you want from the box tasked with keeping nasty emails out. Cisco's Product Security Incident Response Team said it became aware of active exploitation in September, although the networking giant hasn't said who is behind the attacks, how long they have been going on, or how many organizations have been compromised. Cisco uncovered the bug while resolving a Technical Assistance Center support case. Signs suggest at least some Cisco cloud customers were caught up in the attacks. Cisco said it investigated devices belonging to its Secure Email Cloud service and directly contacted customers whose appliances showed indicators of possible compromise. It is now...",
    "product": "Cisco Secure Email Gateway",
    "summary": "Cisco's Secure Email Gateway appliances have a critical vulnerability (CVE-2026-76461) that allows attackers to gain root access via a malicious email, and the flaw is being actively exploited.",
    "planning": false,
    "image_url": "https://image.theregister.com/260832.jpg?imageId=260832&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683",
    "confidence": 1,
    "product_data": {
      "name": "Cisco Secure Email Gateway",
      "full_text": "Cisco Secure Email Gateway",
      "fuzzy_match": false
    },
    "product_tags": [
      "security",
      "online_technology",
      "general_technology"
    ],
    "published_at": "2026-09-15T16:01:00Z",
    "vulnerability": "A critical flaw, tracked as CVE-2026-76461 with a 9.8 CVSS score, in the AsyncOS software allows an unauthenticated attacker to send a malicious email through a vulnerable gateway and run commands as root. The vulnerability is being actively exploited.",
    "article_sentence": "Criminals are exploiting a critical Cisco Secure Email Gateway flaw that can turn a malicious email into root access."
  }
}

curl https://signals.autobound.ai/v1/signals/7cb7b60a-3ddf-7c26-b52b-5ff33315a264 \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"cisco.com","limit":20}'