CVE-2026-76469

HighCVSS 7.4/10Last modified Nov 7, 2026

Description

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76469 are related to insufficient control flow management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-691.

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-691

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Cisco	Cisco Campus Gateway Software	CG 33.1.3
Cisco	Cisco Meraki MR Wireless Access Points Software	MR 33.1.2; MR 30.6; MR 32.1.7; MR 32.2.3; MR 32.2.4; MR 33.1.1
Cisco	Cisco Meraki MV Firmware	4.20; 5.0; 5.1; 5.2; 5.3; 5.4; 5.4.1; 5.5; 5.5.1; 5.6; 5.6.1; 6.0; 6.0.1; 5.6.2; 6.0.2; 6.1; 6.1.1; 6.1.2; 6.2; 6.2.1
Cisco	Cisco Meraki MX Firmware	16.2; 16.3; 16.4; 16.5; 16.6; 17.3; 17.6; 17.7; 17.8; 17.9; 17.10; 18.1; 18.2; 19.1; MX 18.211.2; MX 26.2.1; MX 19.2.8; MX 26.2.2; MX 26.1.4; MX 26.1.5

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-meraki-os-drbEX9GH

Timeline

Published: Oct 7, 2026
Last modified: Nov 7, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-76478.1The Profile Builder Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including 3.14.5. This is due t CVE-2026-764708.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a compr CVE-2026-764719.8A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with CVE-2026-764728.8As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a compr CVE-2026-764739.8As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prim CVE-2026-764749.8As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prim CVE-2026-764759.3As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prim CVE-2026-764768.8As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prim CVE-2026-764778.8As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prim CVE-2026-764788.8As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prim CVE-2026-764797.8As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prim CVE-2026-76484.3The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to payment bypass through user-c