CVE-2026-76463

Cisco Meraki Security Hardening Release: October 2026 - Improper Access Control Vulnerabilities

HIGH
8.8
CVSS Score
Published: October 7, 2026 at 04:18 PM UTC
Updated: October 16, 2026 at 03:14 AM UTC
4 products affected across 1 vendorMeraki MxCisco Meraki Mv FirmwareCisco Campus Gateway Software

Using Cisco Campus Gateway Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Campus Gateway Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH8.8
Exploit prediction
EPSS 0.1%
SSVC
No known exploit

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76463 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.8HIGHcisco
Attack Vector
ADJACENT_NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
LOW
Availability
LOW
Vector?

Quick Info

StatusAWAITING ANALYSIS
CWE
CWE-284

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card