Cisco Email Gateway Exploited, D-Link Routers at CVSS 9.9
Cisco Email Gateway Exploited, D-Link Routers at CVSS 9.9
On 14 September 2026, CISA added CVE-2026-76461 to its Known Exploited Vulnerabilities catalogue, confirming active exploitation of a critical SQL injection flaw in Cisco Secure Email Gateway. The vulnerability allows unauthenticated remote attackers to execute arbitrary commands with root privileges. Dark Reading reported that Russian threat actor Sandworm is chaining Cisco vulnerabilities to deploy Cyclops Blink malware, a sophisticated implant that harvests credentials and maintains persistent access. The same day, D-Link disclosed…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.