Cisco patches actively exploited SEG zero-day allowing root command execution

Cisco has released a patch for a new zero-day vulnerability in its Secure Email Gateway that is being actively exploited in the wild, allowing unauthenticated remote attackers to execute commands with root privileges. The flaw marks another in a series of SEG vulnerabilities targeted by threat actors, indicating persistent interest in this device class. The patch is critical for organizations using affected SEG appliances, as exploitation could lead to full compromise of email infrastructure.