{"id":"CVE-2026-76472","title":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that addre…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-74"],"vendor":"Cisco","product":"Cisco Campus Gateway Software","affected":["campus_gateway_software CG 33.1.3","meraki_mr_wireless_access_points_software MR 33.1.2","meraki_mr_wireless_access_points_software MR 30.6","meraki_mr_wireless_access_points_software MR 32.1.7","meraki_mr_wireless_access_points_software MR 32.2.3","meraki_mr_wireless_access_points_software MR 32.2.4","meraki_mr_wireless_access_points_software MR 33.1.1","meraki_mv_firmware 4.20","meraki_mv_firmware 5.0","meraki_mv_firmware 5.1","meraki_mv_firmware 5.2","meraki_mv_firmware 5.3","meraki_mv_firmware 5.4","meraki_mv_firmware 5.4.1","meraki_mv_firmware 5.5","meraki_mv_firmware 5.5.1","meraki_mv_firmware 5.6","meraki_mv_firmware 5.6.1","meraki_mv_firmware 6.0","meraki_mv_firmware 6.0.1","meraki_mv_firmware 5.6.2","meraki_mv_firmware 6.0.2","meraki_mv_firmware 6.1","meraki_mv_firmware 6.1.1","meraki_mv_firmware 6.1.2","meraki_mv_firmware 6.2","meraki_mv_firmware 6.2.1","meraki_mv_firmware 6.2.2","meraki_mv_firmware 6.3","meraki_mv_firmware 6.3.2","meraki_mv_firmware 2.0","meraki_mv_firmware 2.1","meraki_mv_firmware 2.2","meraki_mv_firmware 3.0","meraki_mv_firmware 3.1","meraki_mv_firmware 3.2","meraki_mv_firmware 3.3","meraki_mv_firmware 3.4","meraki_mv_firmware 3.5","meraki_mv_firmware 3.6","meraki_mv_firmware 3.7","meraki_mv_firmware 3.8","meraki_mv_firmware 3.9","meraki_mv_firmware 3.10","meraki_mv_firmware 3.11","meraki_mv_firmware 3.12","meraki_mv_firmware 3.13","meraki_mv_firmware 3.14","meraki_mv_firmware 3.15","meraki_mv_firmware 3.16"],"published":"2026-10-07","updated":"2026-10-08","sourceUpdated":"2026-10-08T20:08:45.857","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-76472","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-meraki-os-drbEX9GH","label":"psirt@cisco.com"},{"url":"https://software.cisco.com"}],"tags":["nvd","cve.org","csaf","vendor-advisory","cisco"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-08T15:20:54.899553Z"},"ingestedAt":"2026-10-07T16:38:22.239Z","epss":0.00125,"epssPercentile":0.02204,"slug":"CVE-2026-76472","body":"## Overview\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-76472 are related to issues with improper neutralization of special elements that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-74.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **cisco-sa-hardening-meraki-os-drbEX9GH** · Cisco · affected: Cisco Meraki MV Firmware, Cisco Meraki MX Firmware · updated 2026-10-15 · [advisory](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-meraki-os-drbEX9GH)","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}