# CISA Orders Agencies to Patch Cisco Gateways

Cisco disclosed active exploitation of CVE-2026-76519, a critical zero-day in Secure Email Gateway appliances that can allow unauthenticated attackers to execute commands as root. CISA added the vulnerability to its Known Exploited Vulnerabilities catalog and directed federal civilian executive branch agencies to remediate affected systems by **October 17, 2026 (one day remaining)**. The fix is a fixed Content Scanner Tools package or an applicable AsyncOS release; no workaround is available, and suspected compromises should be investigated and recovered before upgrading.

- Federal IT and cybersecurity teams should verify whether Cisco Secure Email Gateway appliances are in their environments and prioritize the applicable fix before the agency deadline.
- Contractors managing or supporting affected systems for federal civilian agencies should coordinate remediation with their agency customers; the signal does not establish a separate contractor-wide deadline.
- Procurement teams may need to assess whether existing support or maintenance arrangements cover the required package or release, and account for investigation and recovery work where compromise is suspected.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Regulatory Compliance
**Published:** October 15, 2026

### Government Entities
- U.S. Cybersecurity and Infrastructure Security Agency (CISA)

### Vendors
- Cisco (Manufacturer of the affected Secure Email Gateway)

### Sources
- [Cisco Secure Email Gateway zero-day exploited in the wild, CISA orders federal patch by Saturday | LavX News](https://news.lavx.hu/article/cisco-secure-email-gateway-zero-day-exploited-in-the-wild-cisa-orders-federal-patch-by-saturday) - news.lavx.hu
- [Exploited Cisco email gateway bug grants root access](https://betanews.com/article/cisco-email-gateway-cve-2026-76519-exploited) - BetaNews