CVE-2026-76468

Cisco Meraki Hardening Release - Input Validation Vulnerabilities

Severity
High 8.2
CVSS 3.1
Remote · no auth what this means
Exploited
Not listed
EPSS
—
Discovered by
Vendor
Vendor-published field
Published
Oct 7, 2026
Assigned by cisco

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76468 are related to improper input validation that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-20.

Weakness: CWE-20

Affected products

Vendor Product Category Matched by
Cisco Cisco Meraki MX Firewall / NGFW cna-assigner
Vendor-reported products (4)
  • Cisco · Cisco Campus Gateway Software
  • Cisco · Cisco Meraki MR Wireless Access Points Software
  • Cisco · Cisco Meraki MV Firmware
  • Cisco · Cisco Meraki MX Firmware

Vendor advisory

cisco-sa-hardening-meraki-os-drbEX9GH

Cisco Meraki Security Hardening Release: October 2026

Cisco’s rating: Critical (advisory CVSS 9.6) · Published Oct 7, 2026

The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from

Something wrong here?