Skip to content
Critical Cisco Meraki Vulnerabilities Disclosed: Urgent Patches Required

Critical Cisco Meraki Vulnerabilities Disclosed: Urgent Patches Required

First seen 12 Oct 2026, 17:36 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 12, 2026 at 20:31 UTC
  • •Seven vulnerabilities disclosed, affecting six Meraki product families.
  • •CVE-2026-76464 rated critical with a CVSS score of 9.6.
  • •Firmware updates are available for some products, others pending until late October and November.

Cisco disclosed seven security vulnerabilities affecting multiple Meraki product families, including critical flaws with a CVSS score of 9.6. The vulnerabilities impact Meraki gateways, switches, wireless access points, and cameras, with no known workarounds available. Fixes for some products are already available, while others are scheduled for release in late October and November 2026. The most severe vulnerability, CVE-2026-76464, involves improper restrictions on memory-buffer operations and can be exploited without authentication or user interaction. Cisco's Product Security Incident Response Team has reported no known exploitation of these vulnerabilities at this time. Administrators are urged to apply the necessary firmware updates as they become available.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-07
Cisco publishes security advisory
Cisco discloses seven vulnerabilities affecting Meraki devices, including critical CVE-2026-76464.
Esecurityplanet
2026-10-07
CVE-2026-76470 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-07
CVE-2026-76463 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-07
CVE-2026-76467 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-07
CVE-2026-76468 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-07
CVE-2026-76472 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-07
CVE-2026-76464 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-07
CVE-2026-76469 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-08
Cyber Centre issues advisory
Canadian Cyber Centre alerts users to vulnerabilities in Cisco products, including Meraki devices.
Cyber.Gc.Ca
2026-10-12
Firmware updates announced
Cisco confirms that firmware fixes for several Meraki products are available or scheduled for release.
Esecurityplanet

More articles in this cluster (5)

Following this threat?

Track CVE-2026-76463 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (23)

1 / 3

Common questions

Which Meraki products are affected?
The vulnerabilities affect Meraki Campus Gateways, MG cellular gateways, MR wireless access points, MV smart cameras, and MX security appliances.
When will firmware updates be available?
Some firmware fixes are already available, while others are scheduled for release in late October and November 2026.
Is there any known exploitation of these vulnerabilities?
Cisco's Product Security Incident Response Team has reported no known exploitation of these vulnerabilities at this time.