Skip to content
Cisco CVEs: Multiple High-Risk Vulnerabilities Disclosed

Cisco CVEs: Multiple High-Risk Vulnerabilities Disclosed

First seen 7 Oct 2026, 22:31 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 7, 2026 at 22:32 UTC
  • •Cisco disclosed multiple high-risk CVEs affecting NX-OS and campus gateway software.
  • •Exploitation requires low-level access, but no active exploitation has been reported.
  • •Organizations should prioritize applying patches to mitigate risks.

On October 7, 2026, Cisco disclosed multiple high-risk vulnerabilities across its NX-OS and campus gateway software, identified as CVE-2026-76453, CVE-2026-76458, CVE-2026-76459, CVE-2026-76463, CVE-2026-76467, CVE-2026-76468, CVE-2026-76469, and CVE-2026-76472. These vulnerabilities, with CVSS scores ranging from 7.4 to 8.8, affect various Cisco products, including NX-OS and Meraki devices. Attackers could exploit these flaws without user interaction, potentially leading to service disruptions or unauthorized access. Cisco has not reported any active exploitation but emphasizes the urgency for organizations to apply the recommended patches. The vulnerabilities primarily affect organizations using Cisco's networking infrastructure, particularly those with exposed management interfaces. Administrators are advised to review access logs and monitor for unusual activity while prioritizing the application of the provided software updates.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-07
Cisco discloses multiple CVEs
Cisco published advisories for CVE-2026-76453, CVE-2026-76458, CVE-2026-76459, CVE-2026-76463, CVE-2026-76467, CVE-2026-76468, CVE-2026-76469, and CVE-2026-76472, with CVSS scores from 7.4 to 8.8.
Redpacketsecurity
2026-10-07
Cisco issues patch guidance
Cisco recommended immediate patching for affected products to prevent potential exploitation of the disclosed vulnerabilities.
Redpacketsecurity
2026-10-07
CVE-2026-76458 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-07
CVE-2026-76467 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-07
CVE-2026-76472 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-07
CVE-2026-76463 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-07
CVE-2026-76459 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-07
CVE-2026-76468 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-07
CVE-2026-76469 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-07
CVE-2026-76453 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (10)

Following this threat?

Track Cisco and CVE-2026-76453 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (12)

1 / 2

Common questions

Which Cisco products are affected?
The vulnerabilities affect Cisco NX-OS and campus gateway software, including Meraki devices.
What is the risk of exploitation?
While no active exploitation has been reported, the vulnerabilities could allow unauthorized access or service disruptions.
What should organizations do?
Organizations should prioritize applying the recommended patches and monitor for unusual activity in their networks.