CVE-2026-76463

HighCVSS 8.8/10Last modified Nov 7, 2026

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76463 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L

Weakness enumeration

CWE-284

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
CiscoCisco Campus Gateway SoftwareCG 33.1.3
CiscoCisco Meraki MR Wireless Access Points SoftwareMR 33.1.2; MR 30.6; MR 32.1.7; MR 32.2.3; MR 32.2.4; MR 33.1.1
CiscoCisco Meraki MV Firmware4.20; 5.0; 5.1; 5.2; 5.3; 5.4; 5.4.1; 5.5; 5.5.1; 5.6; 5.6.1; 6.0; 6.0.1; 5.6.2; 6.0.2; 6.1; 6.1.1; 6.1.2; 6.2; 6.2.1
CiscoCisco Meraki MX Firmware16.2; 16.3; 16.4; 16.5; 16.6; 17.3; 17.6; 17.7; 17.8; 17.9; 17.10; 18.1; 18.2; 19.1; MX 18.211.2; MX 26.2.1; MX 19.2.8; MX 26.2.2; MX 26.1.4; MX 26.1.5

References

Timeline

Published
Oct 7, 2026
Last modified
Nov 7, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-764649.6As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprCVE-2026-764659.8A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series SwiCVE-2026-764669.8A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network acceCVE-2026-764677.5As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprCVE-2026-764688.2As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprCVE-2026-764697.4As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprCVE-2026-76478.1The Profile Builder Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including 3.14.5. This is due tCVE-2026-764708.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprCVE-2026-764719.8A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code withCVE-2026-764728.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprCVE-2026-764739.8As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco PrimCVE-2026-764749.8As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prim