Vulnerability-Lookup

CVE-2026-76467 (GCVE-0-2026-76467)

Vulnerability from cvelistv5 – Published: 2026-10-07 16:19 – Updated: 2026-10-08 15:30

Title

Cisco Meraki Software Hardening Release - Resource Lifetime Management Vulnerabilities

Summary

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76467 are related to issues concerning improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-08 15:29 UTC

CWE

CWE-664 - Improper Control of a Resource Through its Lifetime

Assigner

cisco CNA under the mitre root

CNA scorecard C 66/100 over 395 records in the last 180 days details

References

1 reference

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

4 products

Vendor	Product	Version	CPE status
Cisco	Cisco Campus Gateway Software	Affected: CG 33.1.3	guessed
Cisco	Cisco Meraki MR Wireless Access Points Software	Affected: MR 33.1.2 Affected: MR 30.6 Affected: MR 32.1.7 Affected: MR 32.2.3 Affected: MR 32.2.4 Affected: MR 33.1.1	guessed
Cisco	Cisco Meraki MV Firmware	Affected: 4.20 Affected: 5.0 Affected: 5.1 Affected: 5.2 Affected: 5.3 Affected: 5.4 Affected: 5.4.1 Affected: 5.5 Affected: 5.5.1 Affected: 5.6 Affected: 5.6.1 Affected: 6.0 Affected: 6.0.1 Affected: 5.6.2 Affected: 6.0.2 Affected: 6.1 Affected: 6.1.1 Affected: 6.1.2 Affected: 6.2 Affected: 6.2.1 Affected: 6.2.2 Affected: 6.3 Affected: 6.3.2 Affected: 2.0 Affected: 2.1 Affected: 2.2 Affected: 3.0 Affected: 3.1 Affected: 3.2 Affected: 3.3 Affected: 3.4 Affected: 3.5 Affected: 3.6 Affected: 3.7 Affected: 3.8 Affected: 3.9 Affected: 3.10 Affected: 3.11 Affected: 3.12 Affected: 3.13 Affected: 3.14 Affected: 3.15 Affected: 3.16 Affected: 3.17 Affected: 3.18 Affected: 3.19 Affected: 3.20 Affected: 3.21 Affected: 3.22 Affected: 3.23 Affected: 3.24 Affected: 3.25 Affected: 3.26 Affected: 3.27 Affected: 3.28 Affected: 3.29 Affected: 3.30 Affected: 3.31 Affected: 3.32 Affected: 3.33 Affected: 3.34 Affected: 3.35 Affected: 3.36 Affected: 4.0 Affected: 4.1 Affected: 4.2 Affected: 4.3 Affected: 4.4 Affected: 4.5 Affected: 4.6 Affected: 4.7 Affected: 4.8 Affected: 4.9 Affected: 4.10 Affected: 4.11 Affected: 4.12 Affected: 4.13 Affected: 4.14 Affected: 4.15 Affected: 4.16 Affected: 4.17 Affected: 4.18 Affected: 4.18.1 Affected: 4.19 Affected: MV 7.3 Affected: MV 7.3.1 Affected: MV 7.3.2 Affected: MV 7.2.1 Affected: MV 7.2.2	guessed
Cisco	Cisco Meraki MX Firmware	Affected: 16.2 Affected: 16.3 Affected: 16.4 Affected: 16.5 Affected: 16.6 Affected: 17.3 Affected: 17.6 Affected: 17.7 Affected: 17.8 Affected: 17.9 Affected: 17.10 Affected: 18.1 Affected: 18.2 Affected: 19.1 Affected: MX 18.211.2 Affected: MX 26.2.1 Affected: MX 19.2.8 Affected: MX 26.2.2 Affected: MX 26.1.4 Affected: MX 26.1.5 Affected: MX 26.1.6	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-76467",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-08T15:29:52.602413Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-08T15:30:01.062Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Campus Gateway Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "CG 33.1.3"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Cisco Meraki MR Wireless Access Points Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "MR 33.1.2"
            },
            {
              "status": "affected",
              "version": "MR 30.6"
            },
            {
              "status": "affected",
              "version": "MR 32.1.7"
            },
            {
              "status": "affected",
              "version": "MR 32.2.3"
            },
            {
              "status": "affected",
              "version": "MR 32.2.4"
            },
            {
              "status": "affected",
              "version": "MR 33.1.1"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Cisco Meraki MV Firmware",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "4.20"
            },
            {
              "status": "affected",
              "version": "5.0"
            },
            {
              "status": "affected",
              "version": "5.1"
            },
            {
              "status": "affected",
              "version": "5.2"
            },
            {
              "status": "affected",
              "version": "5.3"
            },
            {
              "status": "affected",
              "version": "5.4"
            },
            {
              "status": "affected",
              "version": "5.4.1"
            },
            {
              "status": "affected",
              "version": "5.5"
            },
            {
              "status": "affected",
              "version": "5.5.1"
            },
            {
              "status": "affected",
              "version": "5.6"
            },
            {
              "status": "affected",
              "version": "5.6.1"
            },
            {
              "status": "affected",
              "version": "6.0"
            },
            {
              "status": "affected",
              "version": "6.0.1"
            },
            {
              "status": "affected",
              "version": "5.6.2"
            },
            {
              "status": "affected",
              "version": "6.0.2"
            },
            {
              "status": "affected",
              "version": "6.1"
            },
            {
              "status": "affected",
              "version": "6.1.1"
            },
            {
              "status": "affected",
              "version": "6.1.2"
            },
            {
              "status": "affected",
              "version": "6.2"
            },
            {
              "status": "affected",
              "version": "6.2.1"
            },
            {
              "status": "affected",
              "version": "6.2.2"
            },
            {
              "status": "affected",
              "version": "6.3"
            },
            {
              "status": "affected",
              "version": "6.3.2"
            },
            {
              "status": "affected",
              "version": "2.0"
            },
            {
              "status": "affected",
              "version": "2.1"
            },
            {
              "status": "affected",
              "version": "2.2"
            },
            {
              "status": "affected",
              "version": "3.0"
            },
            {
              "status": "affected",
              "version": "3.1"
            },
            {
              "status": "affected",
              "version": "3.2"
            },
            {
              "status": "affected",
              "version": "3.3"
            },
            {
              "status": "affected",
              "version": "3.4"
            },
            {
              "status": "affected",
              "version": "3.5"
            },
            {
              "status": "affected",
              "version": "3.6"
            },
            {
              "status": "affected",
              "version": "3.7"
            },
            {
              "status": "affected",
              "version": "3.8"
            },
            {
              "status": "affected",
              "version": "3.9"
            },
            {
              "status": "affected",
              "version": "3.10"
            },
            {
              "status": "affected",
              "version": "3.11"
            },
            {
              "status": "affected",
              "version": "3.12"
            },
            {
              "status": "affected",
              "version": "3.13"
            },
            {
              "status": "affected",
              "version": "3.14"
            },
            {
              "status": "affected",
              "version": "3.15"
            },
            {
              "status": "affected",
              "version": "3.16"
            },
            {
              "status": "affected",
              "version": "3.17"
            },
            {
              "status": "affected",
              "version": "3.18"
            },
            {
              "status": "affected",
              "version": "3.19"
            },
            {
              "status": "affected",
              "version": "3.20"
            },
            {
              "status": "affected",
              "version": "3.21"
            },
            {
              "status": "affected",
              "version": "3.22"
            },
            {
              "status": "affected",
              "version": "3.23"
            },
            {
              "status": "affected",
              "version": "3.24"
            },
            {
              "status": "affected",
              "version": "3.25"
            },
            {
              "status": "affected",
              "version": "3.26"
            },
            {
              "status": "affected",
              "version": "3.27"
            },
            {
              "status": "affected",
              "version": "3.28"
            },
            {
              "status": "affected",
              "version": "3.29"
            },
            {
              "status": "affected",
              "version": "3.30"
            },
            {
              "status": "affected",
              "version": "3.31"
            },
            {
              "status": "affected",
              "version": "3.32"
            },
            {
              "status": "affected",
              "version": "3.33"
            },
            {
              "status": "affected",
              "version": "3.34"
            },
            {
              "status": "affected",
              "version": "3.35"
            },
            {
              "status": "affected",
              "version": "3.36"
            },
            {
              "status": "affected",
              "version": "4.0"
            },
            {
              "status": "affected",
              "version": "4.1"
            },
            {
              "status": "affected",
              "version": "4.2"
            },
            {
              "status": "affected",
              "version": "4.3"
            },
            {
              "status": "affected",
              "version": "4.4"
            },
            {
              "status": "affected",
              "version": "4.5"
            },
            {
              "status": "affected",
              "version": "4.6"
            },
            {
              "status": "affected",
              "version": "4.7"
            },
            {
              "status": "affected",
              "version": "4.8"
            },
            {
              "status": "affected",
              "version": "4.9"
            },
            {
              "status": "affected",
              "version": "4.10"
            },
            {
              "status": "affected",
              "version": "4.11"
            },
            {
              "status": "affected",
              "version": "4.12"
            },
            {
              "status": "affected",
              "version": "4.13"
            },
            {
              "status": "affected",
              "version": "4.14"
            },
            {
              "status": "affected",
              "version": "4.15"
            },
            {
              "status": "affected",
              "version": "4.16"
            },
            {
              "status": "affected",
              "version": "4.17"
            },
            {
              "status": "affected",
              "version": "4.18"
            },
            {
              "status": "affected",
              "version": "4.18.1"
            },
            {
              "status": "affected",
              "version": "4.19"
            },
            {
              "status": "affected",
              "version": "MV 7.3"
            },
            {
              "status": "affected",
              "version": "MV 7.3.1"
            },
            {
              "status": "affected",
              "version": "MV 7.3.2"
            },
            {
              "status": "affected",
              "version": "MV 7.2.1"
            },
            {
              "status": "affected",
              "version": "MV 7.2.2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Cisco Meraki MX Firmware",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "16.2"
            },
            {
              "status": "affected",
              "version": "16.3"
            },
            {
              "status": "affected",
              "version": "16.4"
            },
            {
              "status": "affected",
              "version": "16.5"
            },
            {
              "status": "affected",
              "version": "16.6"
            },
            {
              "status": "affected",
              "version": "17.3"
            },
            {
              "status": "affected",
              "version": "17.6"
            },
            {
              "status": "affected",
              "version": "17.7"
            },
            {
              "status": "affected",
              "version": "17.8"
            },
            {
              "status": "affected",
              "version": "17.9"
            },
            {
              "status": "affected",
              "version": "17.10"
            },
            {
              "status": "affected",
              "version": "18.1"
            },
            {
              "status": "affected",
              "version": "18.2"
            },
            {
              "status": "affected",
              "version": "19.1"
            },
            {
              "status": "affected",
              "version": "MX 18.211.2"
            },
            {
              "status": "affected",
              "version": "MX 26.2.1"
            },
            {
              "status": "affected",
              "version": "MX 19.2.8"
            },
            {
              "status": "affected",
              "version": "MX 26.2.2"
            },
            {
              "status": "affected",
              "version": "MX 26.1.4"
            },
            {
              "status": "affected",
              "version": "MX 26.1.5"
            },
            {
              "status": "affected",
              "version": "MX 26.1.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-76467 are related to issues concerning improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-664",
              "description": "Improper Control of a Resource Through its Lifetime",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-07T16:19:47.709Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-hardening-meraki-os-drbEX9GH",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-meraki-os-drbEX9GH"
        }
      ],
      "source": {
        "advisory": "cisco-sa-hardening-meraki-os-drbEX9GH",
        "defects": [
          "CSCww61607"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco Meraki Software Hardening Release - Resource Lifetime Management Vulnerabilities"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2026-76467",
    "datePublished": "2026-10-07T16:19:47.709Z",
    "dateReserved": "2026-08-19T12:02:03.638Z",
    "dateUpdated": "2026-10-08T15:30:01.062Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-76467",
      "date": "2026-10-08",
      "epss": "0.00252",
      "percentile": "0.15269"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unknown",
                "product": "Cisco Campus Gateway Software",
                "vendor": "Cisco",
                "versions": [
                  {
                    "status": "affected",
                    "version": "CG 33.1.3"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "Cisco Meraki MR Wireless Access Points Software",
                "vendor": "Cisco",
                "versions": [
                  {
                    "status": "affected",
                    "version": "MR 33.1.2"
                  },
                  {
                    "status": "affected",
                    "version": "MR 30.6"
                  },
                  {
                    "status": "affected",
                    "version": "MR 32.1.7"
                  },
                  {
                    "status": "affected",
                    "version": "MR 32.2.3"
                  },
                  {
                    "status": "affected",
                    "version": "MR 32.2.4"
                  },
                  {
                    "status": "affected",
                    "version": "MR 33.1.1"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "Cisco Meraki MV Firmware",
                "vendor": "Cisco",
                "versions": [
                  {
                    "status": "affected",
                    "version": "4.20"
                  },
                  {
                    "status": "affected",
                    "version": "5.0"
                  },
                  {
                    "status": "affected",
                    "version": "5.1"
                  },
                  {
                    "status": "affected",
                    "version": "5.2"
                  },
                  {
                    "status": "affected",
                    "version": "5.3"
                  },
                  {
                    "status": "affected",
                    "version": "5.4"
                  },
                  {
                    "status": "affected",
                    "version": "5.4.1"
                  },
                  {
                    "status": "affected",
                    "version": "5.5"
                  },
                  {
                    "status": "affected",
                    "version": "5.5.1"
                  },
                  {
                    "status": "affected",
                    "version": "5.6"
                  },
                  {
                    "status": "affected",
                    "version": "5.6.1"
                  },
                  {
                    "status": "affected",
                    "version": "6.0"
                  },
                  {
                    "status": "affected",
                    "version": "6.0.1"
                  },
                  {
                    "status": "affected",
                    "version": "5.6.2"
                  },
                  {
                    "status": "affected",
                    "version": "6.0.2"
                  },
                  {
                    "status": "affected",
                    "version": "6.1"
                  },
                  {
                    "status": "affected",
                    "version": "6.1.1"
                  },
                  {
                    "status": "affected",
                    "version": "6.1.2"
                  },
                  {
                    "status": "affected",
                    "version": "6.2"
                  },
                  {
                    "status": "affected",
                    "version": "6.2.1"
                  },
                  {
                    "status": "affected",
                    "version": "6.2.2"
                  },
                  {
                    "status": "affected",
                    "version": "6.3"
                  },
                  {
                    "status": "affected",
                    "version": "6.3.2"
                  },
                  {
                    "status": "affected",
                    "version": "2.0"
                  },
                  {
                    "status": "affected",
                    "version": "2.1"
                  },
                  {
                    "status": "affected",
                    "version": "2.2"
                  },
                  {
                    "status": "affected",
                    "version": "3.0"
                  },
                  {
                    "status": "affected",
                    "version": "3.1"
                  },
                  {
                    "status": "affected",
                    "version": "3.2"
                  },
                  {
                    "status": "affected",
                    "version": "3.3"
                  },
                  {
                    "status": "affected",
                    "version": "3.4"
                  },
                  {
                    "status": "affected",
                    "version": "3.5"
                  },
                  {
                    "status": "affected",
                    "version": "3.6"
                  },
                  {
                    "status": "affected",
                    "version": "3.7"
                  },
                  {
                    "status": "affected",
                    "version": "3.8"
                  },
                  {
                    "status": "affected",
                    "version": "3.9"
                  },
                  {
                    "status": "affected",
                    "version": "3.10"
                  },
                  {
                    "status": "affected",
                    "version": "3.11"
                  },
                  {
                    "status": "affected",
                    "version": "3.12"
                  },
                  {
                    "status": "affected",
                    "version": "3.13"
                  },
                  {
                    "status": "affected",
                    "version": "3.14"
                  },
                  {
                    "status": "affected",
                    "version": "3.15"
                  },
                  {
                    "status": "affected",
                    "version": "3.16"
                  },
                  {
                    "status": "affected",
                    "version": "3.17"
                  },
                  {
                    "status": "affected",
                    "version": "3.18"
                  },
                  {
                    "status": "affected",
                    "version": "3.19"
                  },
                  {
                    "status": "affected",
                    "version": "3.20"
                  },
                  {
                    "status": "affected",
                    "version": "3.21"
                  },
                  {
                    "status": "affected",
                    "version": "3.22"
                  },
                  {
                    "status": "affected",
                    "version": "3.23"
                  },
                  {
                    "status": "affected",
                    "version": "3.24"
                  },
                  {
                    "status": "affected",
                    "version": "3.25"
                  },
                  {
                    "status": "affected",
                    "version": "3.26"
                  },
                  {
                    "status": "affected",
                    "version": "3.27"
                  },
                  {
                    "status": "affected",
                    "version": "3.28"
                  },
                  {
                    "status": "affected",
                    "version": "3.29"
                  },
                  {
                    "status": "affected",
                    "version": "3.30"
                  },
                  {
                    "status": "affected",
                    "version": "3.31"
                  },
                  {
                    "status": "affected",
                    "version": "3.32"
                  },
                  {
                    "status": "affected",
                    "version": "3.33"
                  },
                  {
                    "status": "affected",
                    "version": "3.34"
                  },
                  {
                    "status": "affected",
                    "version": "3.35"
                  },
                  {
                    "status": "affected",
                    "version": "3.36"
                  },
                  {
                    "status": "affected",
                    "version": "4.0"
                  },
                  {
                    "status": "affected",
                    "version": "4.1"
                  },
                  {
                    "status": "affected",
                    "version": "4.2"
                  },
                  {
                    "status": "affected",
                    "version": "4.3"
                  },
                  {
                    "status": "affected",
                    "version": "4.4"
                  },
                  {
                    "status": "affected",
                    "version": "4.5"
                  },
                  {
                    "status": "affected",
                    "version": "4.6"
                  },
                  {
                    "status": "affected",
                    "version": "4.7"
                  },
                  {
                    "status": "affected",
                    "version": "4.8"
                  },
                  {
                    "status": "affected",
                    "version": "4.9"
                  },
                  {
                    "status": "affected",
                    "version": "4.10"
                  },
                  {
                    "status": "affected",
                    "version": "4.11"
                  },
                  {
                    "status": "affected",
                    "version": "4.12"
                  },
                  {
                    "status": "affected",
                    "version": "4.13"
                  },
                  {
                    "status": "affected",
                    "version": "4.14"
                  },
                  {
                    "status": "affected",
                    "version": "4.15"
                  },
                  {
                    "status": "affected",
                    "version": "4.16"
                  },
                  {
                    "status": "affected",
                    "version": "4.17"
                  },
                  {
                    "status": "affected",
                    "version": "4.18"
                  },
                  {
                    "status": "affected",
                    "version": "4.18.1"
                  },
                  {
                    "status": "affected",
                    "version": "4.19"
                  },
                  {
                    "status": "affected",
                    "version": "MV 7.3"
                  },
                  {
                    "status": "affected",
                    "version": "MV 7.3.1"
                  },
                  {
                    "status": "affected",
                    "version": "MV 7.3.2"
                  },
                  {
                    "status": "affected",
                    "version": "MV 7.2.1"
                  },
                  {
                    "status": "affected",
                    "version": "MV 7.2.2"
                  }
                ]
              },
              {
                "defaultStatus": "unknown",
                "product": "Cisco Meraki MX Firmware",
                "vendor": "Cisco",
                "versions": [
                  {
                    "status": "affected",
                    "version": "16.2"
                  },
                  {
                    "status": "affected",
                    "version": "16.3"
                  },
                  {
                    "status": "affected",
                    "version": "16.4"
                  },
                  {
                    "status": "affected",
                    "version": "16.5"
                  },
                  {
                    "status": "affected",
                    "version": "16.6"
                  },
                  {
                    "status": "affected",
                    "version": "17.3"
                  },
                  {
                    "status": "affected",
                    "version": "17.6"
                  },
                  {
                    "status": "affected",
                    "version": "17.7"
                  },
                  {
                    "status": "affected",
                    "version": "17.8"
                  },
                  {
                    "status": "affected",
                    "version": "17.9"
                  },
                  {
                    "status": "affected",
                    "version": "17.10"
                  },
                  {
                    "status": "affected",
                    "version": "18.1"
                  },
                  {
                    "status": "affected",
                    "version": "18.2"
                  },
                  {
                    "status": "affected",
                    "version": "19.1"
                  },
                  {
                    "status": "affected",
                    "version": "MX 18.211.2"
                  },
                  {
                    "status": "affected",
                    "version": "MX 26.2.1"
                  },
                  {
                    "status": "affected",
                    "version": "MX 19.2.8"
                  },
                  {
                    "status": "affected",
                    "version": "MX 26.2.2"
                  },
                  {
                    "status": "affected",
                    "version": "MX 26.1.4"
                  },
                  {
                    "status": "affected",
                    "version": "MX 26.1.5"
                  },
                  {
                    "status": "affected",
                    "version": "MX 26.1.6"
                  }
                ]
              }
            ],
            "source": "psirt@cisco.com"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-76467 are related to issues concerning improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664."
          }
        ],
        "id": "CVE-2026-76467",
        "lastModified": "2026-10-07T17:16:59.503",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "psirt@cisco.com",
              "type": "Primary"
            }
          ]
        },
        "published": "2026-10-07T17:16:59.503",
        "references": [
          {
            "source": "psirt@cisco.com",
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-meraki-os-drbEX9GH"
          }
        ],
        "sourceIdentifier": "psirt@cisco.com",
        "vulnStatus": "Received",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-664"
              }
            ],
            "source": "psirt@cisco.com",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

CERTFR-2026-AVI-1282

Vulnerability from certfr_avis - Published: 2026-10-08 - Updated: 2026-10-08

De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Cisco	N/A	NX-OS Software versions 10.5 antérieures à 10.5(6)
Cisco	N/A	UCS Software versions 6.0 antérieures à 6.0(2e)
Cisco	N/A	Meraki MX Security and SD-WAN Appliance Software versions 26.2.x antérieures à 26.2.3
Cisco	N/A	Meraki MX Security and SD-WAN Appliance Software versions 18.1 antérieures à 18.107.14
Cisco	N/A	Meraki MS Series Switch Software versions IOS XE 17.15 antérieures à IOS XE 17.15.6
Cisco	N/A	NX-OS Software versions 10.4 antérieures à 10.4(8)
Cisco	N/A	Meraki MS Series Switch Software versions IOS XE 26.1 antérieures à IOS XE 26.1.2
Cisco	N/A	NX-OS Software versions 9.x antérieures à 9.4(5a)
Cisco	N/A	Unified CCX versions antérieures à 15.0(1) SU2 (disponibilité prévue pour février 2027)
Cisco	N/A	Meraki MR Wireless Access Point Software versions 30.7.x antérieures à 30.7.3
Cisco	N/A	Meraki Campus Gateway Software versions 33.1 antérieures à 33.1.4 (disponibilité prévue pour novembre 2026)
Cisco	N/A	NX-OS Software versions 10.6 antérieures à 10.6(4)
Cisco	N/A	Meraki MX Security and SD-WAN Appliance Software versions 26.1.x antérieures à 26.1.7
Cisco	N/A	Meraki MG Cellular Gateway Software versions 26.1.x antérieures à 26.1.4
Cisco	N/A	NX-OS Software versions 16.1 antérieures à 16.1(6g)
Cisco	N/A	Meraki MX Security and SD-WAN Appliance Software versions 19.2 antérieures à 19.2.9
Cisco	N/A	Meraki MR Wireless Access Point Software versions 33.1.x antérieures à 33.1.3
Cisco	N/A	APIC versions 6.2 antérieures à 6.2(3g)
Cisco	N/A	Finesse versions antérieures à 15.0(1) SU3 (disponibilité prévue pour février 2027)
Cisco	N/A	APIC versions antérieures à 6.0(9h)
Cisco	N/A	UCS Software versions antérieures à 4.3(6j)
Cisco	N/A	Meraki MS Series Switch Software versions 18.1 antérieures à 18.1.9 (disponibilité prévue pour octobre 2026)
Cisco	N/A	APIC versions 6.1 antérieures à 6.1(6g)
Cisco	N/A	License On-Prem versions antérieures à 10-202609
Cisco	N/A	Meraki MR Wireless Access Point Software versions 32.2 antérieures à 32.2.5 (disponibilité prévue pour octobre 2026)
Cisco	N/A	Meraki MS Series Switch Software versions IOS XE 17.18 antérieures à IOS XE 17.18.4.1
Cisco	N/A	Meraki MR Wireless Access Point Software versions 31.1.x antérieures à 31.1.8.1
Cisco	N/A	NX-OS Software versions 8.x antérieures à 8.4(14)
Cisco	N/A	Packaged CCE et Unified CCE versions antérieures à 15.0(1)ES202701 (disponibilité prévue pour janvier 2027)
Cisco	N/A	Meraki Campus Gateway Software versions 32.2 antérieures à 32.2.5 (disponibilité prévue pour octobre 2026)
Cisco	N/A	NX-OS Software versions 16.2 antérieures à 16.2(3g)
Cisco	N/A	NX-OS Software versions 10.3 and earlier antérieures à 10.3(10)
Cisco	N/A	Meraki MV Smart Camera Software versions 7 antérieures à 8.0
Cisco	N/A	NX-OS Software versions 16.0 and earlier antérieures à 16.0(9h)

References

Title

Publication Time

Tags

Bulletin de sécurité Cisco cisco-sa-moam-rce-uBTzYV7	2026-10-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-hardening-ssm-Ph77wdhf	2026-10-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-hardening-meraki-os-drbEX9GH	2026-10-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-napi-rce-r2shwu2j	2026-10-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-hardening-apic-UOXWtfh	2026-10-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-finesse-ssrf-mmSuyugS	2026-10-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-ssm-access-nttb2dhE	2026-10-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-hardening-nxosw1-cWzSbtR	2026-10-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-ngoam-rce-LWKQ4BU	2026-10-07	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "NX-OS Software versions 10.5 ant\u00e9rieures \u00e0 10.5(6)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "UCS Software versions 6.0 ant\u00e9rieures \u00e0 6.0(2e)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Meraki MX Security and SD-WAN Appliance Software versions 26.2.x ant\u00e9rieures \u00e0 26.2.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Meraki MX Security and SD-WAN Appliance Software versions 18.1 ant\u00e9rieures \u00e0 18.107.14",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Meraki MS Series Switch Software versions IOS XE 17.15 ant\u00e9rieures \u00e0 IOS XE 17.15.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "NX-OS Software versions 10.4 ant\u00e9rieures \u00e0 10.4(8)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Meraki MS Series Switch Software versions IOS XE 26.1 ant\u00e9rieures \u00e0 IOS XE 26.1.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "NX-OS Software versions 9.x ant\u00e9rieures \u00e0 9.4(5a)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Unified CCX versions ant\u00e9rieures \u00e0 15.0(1) SU2 (disponibilit\u00e9 pr\u00e9vue pour f\u00e9vrier 2027)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Meraki MR Wireless Access Point Software versions 30.7.x ant\u00e9rieures \u00e0 30.7.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Meraki Campus Gateway Software versions 33.1 ant\u00e9rieures \u00e0 33.1.4 (disponibilit\u00e9 pr\u00e9vue pour novembre 2026)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "NX-OS Software versions 10.6 ant\u00e9rieures \u00e0 10.6(4)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Meraki MX Security and SD-WAN Appliance Software versions 26.1.x ant\u00e9rieures \u00e0 26.1.7",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Meraki MG Cellular Gateway Software versions 26.1.x ant\u00e9rieures \u00e0 26.1.4",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "NX-OS Software versions 16.1 ant\u00e9rieures \u00e0 16.1(6g)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Meraki MX Security and SD-WAN Appliance Software versions 19.2 ant\u00e9rieures \u00e0 19.2.9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Meraki MR Wireless Access Point Software versions 33.1.x ant\u00e9rieures \u00e0 33.1.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "APIC versions 6.2 ant\u00e9rieures \u00e0 6.2(3g)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Finesse versions ant\u00e9rieures \u00e0 15.0(1) SU3 (disponibilit\u00e9 pr\u00e9vue pour f\u00e9vrier 2027)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "APIC versions ant\u00e9rieures \u00e0 6.0(9h)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "UCS Software versions ant\u00e9rieures \u00e0 4.3(6j)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Meraki MS Series Switch Software versions 18.1 ant\u00e9rieures \u00e0 18.1.9 (disponibilit\u00e9 pr\u00e9vue pour octobre 2026)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "APIC versions 6.1 ant\u00e9rieures \u00e0 6.1(6g)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "License On-Prem versions ant\u00e9rieures \u00e0  10-202609",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Meraki MR Wireless Access Point Software versions 32.2 ant\u00e9rieures \u00e0 32.2.5 (disponibilit\u00e9 pr\u00e9vue pour octobre 2026)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Meraki MS Series Switch Software versions IOS XE 17.18 ant\u00e9rieures \u00e0 IOS XE 17.18.4.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Meraki MR Wireless Access Point Software versions 31.1.x ant\u00e9rieures \u00e0 31.1.8.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "NX-OS Software versions 8.x ant\u00e9rieures \u00e0 8.4(14)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Packaged CCE et Unified CCE versions ant\u00e9rieures \u00e0 15.0(1)ES202701 (disponibilit\u00e9 pr\u00e9vue pour janvier 2027)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Meraki Campus Gateway Software versions 32.2 ant\u00e9rieures \u00e0 32.2.5 (disponibilit\u00e9 pr\u00e9vue pour octobre 2026)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "NX-OS Software versions 16.2 ant\u00e9rieures \u00e0 16.2(3g)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "NX-OS Software versions 10.3 and earlier ant\u00e9rieures \u00e0 10.3(10)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Meraki MV Smart Camera Software versions 7 ant\u00e9rieures \u00e0 8.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "NX-OS Software versions 16.0 and earlier ant\u00e9rieures \u00e0 16.0(9h)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-76471",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76471"
    },
    {
      "name": "CVE-2026-76455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76455"
    },
    {
      "name": "CVE-2026-76482",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76482"
    },
    {
      "name": "CVE-2026-76452",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76452"
    },
    {
      "name": "CVE-2026-76499",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76499"
    },
    {
      "name": "CVE-2026-76501",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76501"
    },
    {
      "name": "CVE-2026-76485",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76485"
    },
    {
      "name": "CVE-2026-76484",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76484"
    },
    {
      "name": "CVE-2026-20362",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20362"
    },
    {
      "name": "CVE-2026-76465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76465"
    },
    {
      "name": "CVE-2026-76470",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76470"
    },
    {
      "name": "CVE-2026-76483",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76483"
    },
    {
      "name": "CVE-2026-76500",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76500"
    },
    {
      "name": "CVE-2026-76459",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76459"
    },
    {
      "name": "CVE-2026-76463",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76463"
    },
    {
      "name": "CVE-2026-76454",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76454"
    },
    {
      "name": "CVE-2026-76472",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76472"
    },
    {
      "name": "CVE-2026-76467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76467"
    },
    {
      "name": "CVE-2026-76498",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76498"
    },
    {
      "name": "CVE-2026-76458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76458"
    },
    {
      "name": "CVE-2026-76464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76464"
    },
    {
      "name": "CVE-2026-76486",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76486"
    },
    {
      "name": "CVE-2026-76437",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76437"
    },
    {
      "name": "CVE-2026-20328",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-20328"
    },
    {
      "name": "CVE-2026-76457",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76457"
    },
    {
      "name": "CVE-2026-76480",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76480"
    },
    {
      "name": "CVE-2026-76469",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76469"
    },
    {
      "name": "CVE-2026-76453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76453"
    },
    {
      "name": "CVE-2026-76456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76456"
    },
    {
      "name": "CVE-2026-76468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76468"
    }
  ],
  "initial_release_date": "2026-10-08T00:00:00",
  "last_revision_date": "2026-10-08T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1282",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-10-08T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Injection SQL (SQLi)"
    },
    {
      "description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Cisco. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco",
  "vendor_advisories": [
    {
      "published_at": "2026-10-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-moam-rce-uBTzYV7",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-moam-rce-uBTzYV7"
    },
    {
      "published_at": "2026-10-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-hardening-ssm-Ph77wdhf",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ssm-Ph77wdhf"
    },
    {
      "published_at": "2026-10-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-hardening-meraki-os-drbEX9GH",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-meraki-os-drbEX9GH"
    },
    {
      "published_at": "2026-10-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-napi-rce-r2shwu2j",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-napi-rce-r2shwu2j"
    },
    {
      "published_at": "2026-10-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-hardening-apic-UOXWtfh",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-apic-UOXWtfh"
    },
    {
      "published_at": "2026-10-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-finesse-ssrf-mmSuyugS",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-ssrf-mmSuyugS"
    },
    {
      "published_at": "2026-10-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ssm-access-nttb2dhE",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ssm-access-nttb2dhE"
    },
    {
      "published_at": "2026-10-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-hardening-nxosw1-cWzSbtR",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-nxosw1-cWzSbtR"
    },
    {
      "published_at": "2026-10-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ngoam-rce-LWKQ4BU",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ngoam-rce-LWKQ4BU"
    }
  ]
}

CISCO-SA-HARDENING-MERAKI-OS-DRBEX9GH

Vulnerability from csaf_cisco - Published: 2026-10-07 16:00 - Updated: 2026-10-08 00:18

Summary

Cisco Meraki Security Hardening Release: October 2026

Scope

7 vulnerabilities in this advisory, including CVE-2026-76467.

CVE-2026-76467

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Known affected: 2 products

https://software.cisco.com

Open the full advisory

FKIE_CVE-2026-76467

Vulnerability from fkie_nvd - Published: 2026-10-07 17:16 - Updated: 2026-10-07 17:16

Severity

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

References

	URL	Tags
	psirt@cisco.com	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-meraki-os-drbEX9GH

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unknown",
          "product": "Cisco Campus Gateway Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "CG 33.1.3"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Cisco Meraki MR Wireless Access Points Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "MR 33.1.2"
            },
            {
              "status": "affected",
              "version": "MR 30.6"
            },
            {
              "status": "affected",
              "version": "MR 32.1.7"
            },
            {
              "status": "affected",
              "version": "MR 32.2.3"
            },
            {
              "status": "affected",
              "version": "MR 32.2.4"
            },
            {
              "status": "affected",
              "version": "MR 33.1.1"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Cisco Meraki MV Firmware",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "4.20"
            },
            {
              "status": "affected",
              "version": "5.0"
            },
            {
              "status": "affected",
              "version": "5.1"
            },
            {
              "status": "affected",
              "version": "5.2"
            },
            {
              "status": "affected",
              "version": "5.3"
            },
            {
              "status": "affected",
              "version": "5.4"
            },
            {
              "status": "affected",
              "version": "5.4.1"
            },
            {
              "status": "affected",
              "version": "5.5"
            },
            {
              "status": "affected",
              "version": "5.5.1"
            },
            {
              "status": "affected",
              "version": "5.6"
            },
            {
              "status": "affected",
              "version": "5.6.1"
            },
            {
              "status": "affected",
              "version": "6.0"
            },
            {
              "status": "affected",
              "version": "6.0.1"
            },
            {
              "status": "affected",
              "version": "5.6.2"
            },
            {
              "status": "affected",
              "version": "6.0.2"
            },
            {
              "status": "affected",
              "version": "6.1"
            },
            {
              "status": "affected",
              "version": "6.1.1"
            },
            {
              "status": "affected",
              "version": "6.1.2"
            },
            {
              "status": "affected",
              "version": "6.2"
            },
            {
              "status": "affected",
              "version": "6.2.1"
            },
            {
              "status": "affected",
              "version": "6.2.2"
            },
            {
              "status": "affected",
              "version": "6.3"
            },
            {
              "status": "affected",
              "version": "6.3.2"
            },
            {
              "status": "affected",
              "version": "2.0"
            },
            {
              "status": "affected",
              "version": "2.1"
            },
            {
              "status": "affected",
              "version": "2.2"
            },
            {
              "status": "affected",
              "version": "3.0"
            },
            {
              "status": "affected",
              "version": "3.1"
            },
            {
              "status": "affected",
              "version": "3.2"
            },
            {
              "status": "affected",
              "version": "3.3"
            },
            {
              "status": "affected",
              "version": "3.4"
            },
            {
              "status": "affected",
              "version": "3.5"
            },
            {
              "status": "affected",
              "version": "3.6"
            },
            {
              "status": "affected",
              "version": "3.7"
            },
            {
              "status": "affected",
              "version": "3.8"
            },
            {
              "status": "affected",
              "version": "3.9"
            },
            {
              "status": "affected",
              "version": "3.10"
            },
            {
              "status": "affected",
              "version": "3.11"
            },
            {
              "status": "affected",
              "version": "3.12"
            },
            {
              "status": "affected",
              "version": "3.13"
            },
            {
              "status": "affected",
              "version": "3.14"
            },
            {
              "status": "affected",
              "version": "3.15"
            },
            {
              "status": "affected",
              "version": "3.16"
            },
            {
              "status": "affected",
              "version": "3.17"
            },
            {
              "status": "affected",
              "version": "3.18"
            },
            {
              "status": "affected",
              "version": "3.19"
            },
            {
              "status": "affected",
              "version": "3.20"
            },
            {
              "status": "affected",
              "version": "3.21"
            },
            {
              "status": "affected",
              "version": "3.22"
            },
            {
              "status": "affected",
              "version": "3.23"
            },
            {
              "status": "affected",
              "version": "3.24"
            },
            {
              "status": "affected",
              "version": "3.25"
            },
            {
              "status": "affected",
              "version": "3.26"
            },
            {
              "status": "affected",
              "version": "3.27"
            },
            {
              "status": "affected",
              "version": "3.28"
            },
            {
              "status": "affected",
              "version": "3.29"
            },
            {
              "status": "affected",
              "version": "3.30"
            },
            {
              "status": "affected",
              "version": "3.31"
            },
            {
              "status": "affected",
              "version": "3.32"
            },
            {
              "status": "affected",
              "version": "3.33"
            },
            {
              "status": "affected",
              "version": "3.34"
            },
            {
              "status": "affected",
              "version": "3.35"
            },
            {
              "status": "affected",
              "version": "3.36"
            },
            {
              "status": "affected",
              "version": "4.0"
            },
            {
              "status": "affected",
              "version": "4.1"
            },
            {
              "status": "affected",
              "version": "4.2"
            },
            {
              "status": "affected",
              "version": "4.3"
            },
            {
              "status": "affected",
              "version": "4.4"
            },
            {
              "status": "affected",
              "version": "4.5"
            },
            {
              "status": "affected",
              "version": "4.6"
            },
            {
              "status": "affected",
              "version": "4.7"
            },
            {
              "status": "affected",
              "version": "4.8"
            },
            {
              "status": "affected",
              "version": "4.9"
            },
            {
              "status": "affected",
              "version": "4.10"
            },
            {
              "status": "affected",
              "version": "4.11"
            },
            {
              "status": "affected",
              "version": "4.12"
            },
            {
              "status": "affected",
              "version": "4.13"
            },
            {
              "status": "affected",
              "version": "4.14"
            },
            {
              "status": "affected",
              "version": "4.15"
            },
            {
              "status": "affected",
              "version": "4.16"
            },
            {
              "status": "affected",
              "version": "4.17"
            },
            {
              "status": "affected",
              "version": "4.18"
            },
            {
              "status": "affected",
              "version": "4.18.1"
            },
            {
              "status": "affected",
              "version": "4.19"
            },
            {
              "status": "affected",
              "version": "MV 7.3"
            },
            {
              "status": "affected",
              "version": "MV 7.3.1"
            },
            {
              "status": "affected",
              "version": "MV 7.3.2"
            },
            {
              "status": "affected",
              "version": "MV 7.2.1"
            },
            {
              "status": "affected",
              "version": "MV 7.2.2"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "Cisco Meraki MX Firmware",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "16.2"
            },
            {
              "status": "affected",
              "version": "16.3"
            },
            {
              "status": "affected",
              "version": "16.4"
            },
            {
              "status": "affected",
              "version": "16.5"
            },
            {
              "status": "affected",
              "version": "16.6"
            },
            {
              "status": "affected",
              "version": "17.3"
            },
            {
              "status": "affected",
              "version": "17.6"
            },
            {
              "status": "affected",
              "version": "17.7"
            },
            {
              "status": "affected",
              "version": "17.8"
            },
            {
              "status": "affected",
              "version": "17.9"
            },
            {
              "status": "affected",
              "version": "17.10"
            },
            {
              "status": "affected",
              "version": "18.1"
            },
            {
              "status": "affected",
              "version": "18.2"
            },
            {
              "status": "affected",
              "version": "19.1"
            },
            {
              "status": "affected",
              "version": "MX 18.211.2"
            },
            {
              "status": "affected",
              "version": "MX 26.2.1"
            },
            {
              "status": "affected",
              "version": "MX 19.2.8"
            },
            {
              "status": "affected",
              "version": "MX 26.2.2"
            },
            {
              "status": "affected",
              "version": "MX 26.1.4"
            },
            {
              "status": "affected",
              "version": "MX 26.1.5"
            },
            {
              "status": "affected",
              "version": "MX 26.1.6"
            }
          ]
        }
      ],
      "source": "psirt@cisco.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-76467 are related to issues concerning improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664."
    }
  ],
  "id": "CVE-2026-76467",
  "lastModified": "2026-10-07T17:16:59.503",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "psirt@cisco.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2026-10-07T17:16:59.503",
  "references": [
    {
      "source": "psirt@cisco.com",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-meraki-os-drbEX9GH"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Received",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-664"
        }
      ],
      "source": "psirt@cisco.com",
      "type": "Primary"
    }
  ]
}

GHSA-9FFR-55F5-QHVM

Vulnerability from github – Published: 2026-10-07 18:32 – Updated: 2026-10-07 18:32

Details

The vulnerabilities tracked by CVE-2026-76467 are related to issues concerning improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.

Severity

7.5 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-76467"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-664"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-10-07T17:16:59Z",
    "severity": "HIGH"
  },
  "details": "As part of Cisco\u0027s ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities.\n\nThe vulnerabilities tracked by CVE-2026-76467 are related to issues concerning improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.",
  "id": "GHSA-9ffr-55f5-qhvm",
  "modified": "2026-10-07T18:32:11Z",
  "published": "2026-10-07T18:32:11Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76467"
    },
    {
      "type": "WEB",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-meraki-os-drbEX9GH"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-76467 (GCVE-0-2026-76467)

CERTFR-2026-AVI-1282

Solutions

CISCO-SA-HARDENING-MERAKI-OS-DRBEX9GH

FKIE_CVE-2026-76467

GHSA-9FFR-55F5-QHVM

Tags

Sightings

Nomenclature

Related by attack behaviour