CVE-2026-76464

Cisco Meraki Hardening Release October 2026 - Buffer Management Vulnerabilities

Severity
Critical 9.6
CVSS 3.1
Adjacent, local or physical access what this means
Exploited
Not listed
EPSS
—
Discovered by
Vendor
Vendor-published field
Published
Oct 7, 2026
Assigned by cisco

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by this CVE-2026-76464 are related to buffer management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-119.

Weakness: CWE-119

Affected products

Vendor Product Category Matched by
Cisco Cisco Meraki MX Firewall / NGFW cna-assigner
Vendor-reported products (4)
  • Cisco · Cisco Campus Gateway Software
  • Cisco · Cisco Meraki MR Wireless Access Points Software
  • Cisco · Cisco Meraki MV Firmware
  • Cisco · Cisco Meraki MX Firmware

Vendor advisory

cisco-sa-hardening-meraki-os-drbEX9GH

Cisco Meraki Security Hardening Release: October 2026

Cisco’s rating: Critical (advisory CVSS 9.6) · Published Oct 7, 2026

The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from

Something wrong here?