Cisco has patched another actively exploited zero-day vulnerability in its Secure Email Gateway (SEG) product. The flaw could be exploited by remote, unauthenticated attackers to execute arbitrary commands on the underlying system with root privileges, giving them full control over the affected appliance.
The company did not disclose full technical details in the initial advisory, but confirmed that attacks are already occurring in the wild. Administrators are urged to apply the available patch as soon as possible to mitigate the risk.
This is the latest in a series of zero-day issues Cisco has addressed in its email security appliances, underscoring the importance of keeping these edge devices updated promptly.