轉發 台灣電腦網路危機處理暨協調中心 資安訊息警訊 TWCERTCC-200-202610-00000023

[內容說明]
Cisco 針對Cisco Secure Email Gateway 發布重大資安漏洞(CVE-2026-76519，CVSS：9.8)。此漏洞存在於Advanced Malware Protection (AMP)，可能允許未經身分驗證的遠端攻擊者，在底層作業系統上寫入任意檔案。

[影響平台]
Cisco AsyncOS Software for Cisco Secure Email Gateway 15.5版本、 Cisco AsyncOS Software for Cisco Secure Email Gateway 160版本、 Cisco AsyncOS Software for Cisco Secure Email Gateway 16.5版本

[建議措施]
請更新至以下版本： Cisco AsyncOS Software for Cisco Secure Email Gateway 15.5.5-014版本、 Cisco AsyncOS Software for Cisco Secure Email Gateway 16.5.0-780版本

[參考資料]
1. https://www.twcert.org.tw/tw/cp-169-11288-17ac8-1.html

Forwarded from Taiwan Computer Emergency Response Team/Coordination Center Security Advisory TWCERTCC-200-202610-00000023

[Description]
Cisco has released a critical security vulnerability advisory for Cisco Secure Email Gateway (CVE-2026-76519, CVSS: 9.8). This vulnerability exists in Advanced Malware Protection (AMP) and may allow unauthenticated remote attackers to write arbitrary files to the underlying operating system.

[Affected Platforms]
Cisco AsyncOS Software for Cisco Secure Email Gateway version 15.5, Cisco AsyncOS Software for Cisco Secure Email Gateway version 160, Cisco AsyncOS Software for Cisco Secure Email Gateway version 16.5

[Recommendations]
Please update to the following versions: Cisco AsyncOS Software for Cisco Secure Email Gateway version 15.5.5-014, Cisco AsyncOS Software for Cisco Secure Email Gateway version 16.5.0-780

[References]
1. https://www.twcert.org.tw/tw/cp-169-11288-17ac8-1.html