Cisco Secure Email Gateway Flaw CVE-2026-76443 Rated Critical, Patch Available

·2 views

A critical injection vulnerability, CVE-2026-76443, has been identified in Cisco Secure Email Gateway and Cisco Secure Email and Web Manager versions 15.5 and earlier, as part of a five-CVE hardening release published in September 2026. India's CERT-In rated the release CRITICAL, warning that the flaw allows unsanitized attacker-supplied input to reach sensitive processing contexts, including command, SQL, code execution, and cross-site scripting sinks. Successful exploitation could lead to unauthorized command or code execution, data access or modification, and broader compromise of mail flow, configuration, and stored credentials. ZoomEye identified approximately 1,781 internet-facing instances matching the Cisco Secure Email Gateway product fingerprint, indicating a potentially wide exposure. Administrators are advised to apply Cisco's official fix, restrict management interface access to trusted hosts, and treat the upgrade as a single operation covering all five addressed vulnerabilities.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer catalogs 22 AI coding anti-patterns and builds tool to auto-delete them

A developer has identified 22 recurring patterns of low-quality AI-generated code, dubbed 'code slop', that appears correct but introduces subtle bugs, redundancy, and security gaps. Common issues include swallowed exceptions, hallucinated dependencies, one-implementation interfaces, restating comments, and generic variable names like 'data' or 'process'. A USENIX Security 2025 study of 2.23 million AI-generated samples found that nearly 20% referenced non-existent packages, with 43% of invented names reappearing across separate runs. The developer built an agent skill to detect and remove these patterns, demonstrating a real-world refactor that reduced 54 lines of bloated invoice-processing code to just 4 functional lines. The catalog covers not only code quality issues but also AI-generated prose and commit message anti-patterns that mimic the style of experienced engineers without delivering real substance.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Four Hidden Pitfalls of Postgres Logical Replication for Reporting Replicas

A software developer has documented four critical but rarely discussed problems encountered when setting up a PostgreSQL logical replication-based reporting replica. Unlike physical replication, logical replication decodes WAL changes into row-level operations, allowing selective table replication, cross-version compatibility, and replica-only indexes — but with notable trade-offs. One major issue is that DDL changes like adding columns are not replicated, meaning schema migrations must be manually coordinated on both the primary and subscriber databases to avoid silent data gaps or replication errors. Another overlooked problem involves sequences for SERIAL and IDENTITY columns, which are not replicated at all, leaving the replica's sequence counters out of sync and risking duplicate key errors if the replica is ever written to or promoted. The article urges teams to treat replicated-table migrations as two-database operations and plan for sequence management upfront rather than discovering these gaps during incidents.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Handle Encrypted Supplier PDF Decryption Failures in Invoice Pipelines

When a supplier's encrypted PDF fails to open due to a wrong password error, the recommended approach is to quarantine the file, preserve its original bytes with a cryptographic digest, and request correct credentials through an approved channel rather than retrying the same password. A wrong password error does not necessarily confirm the supplier provided incorrect credentials — the file may be truncated, altered in transit, or use encryption settings unsupported by the reader. In invoice processing pipelines, the failed attachment should be treated as a separate issue from invoice generation, which can proceed with an 'attachment-pending' state if policy allows. To prevent one bad attachment from consuming disproportionate worker resources, teams should maintain a dedicated queue for attachment inspection and monitor the age of held orders against delivery SLOs. Access to encrypted supplier files should be restricted to inspection workers, and sensitive data such as passwords or invoice contents must never be logged.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Team Hacker House Builds GraphRAG Fraud Detection Agent Using TigerGraph and Claude

A developer team called Hacker House Goa 2026 has built an autonomous fraud investigation system named FraudLens, using TigerGraph Savanna as its core graph database. The system addresses two major weaknesses in traditional fraud detection: high false-positive rates that block legitimate customers and an inability to detect coordinated syndicate activity spread across many accounts. FraudLens runs an eight-step state machine that traverses multi-hop graph relationships, measures evidence sufficiency, and recommends regulatory actions with full audit trails. The system integrates TigerGraph's native GSQL algorithms, LangGraph, Anthropic's Claude, FastAPI, and React for its full stack. In benchmark testing across 20 cases, the agent achieved 100% schema and logic compliance, correctly flagging two cases for regulatory filing while safely clearing the remaining eighteen.

0 comments Read more at DEV Community