【Vulnerability Alert】Cisco Meraki Has Four Critical Security Vulnerabilities
publish date :
2026-10-22
update date :
2026-10-22
Source: Ministry of education information & communication security contingency platform
| Publication Number | TACERT-ANA-2026101604100000 | Publication Time | 2026-10-16 16:05:03 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026-10-16 16:05:03 |
| Impact Level | Low | ||
| [Subject] 【Vulnerability Alert】Cisco Meraki Has Four Critical Security Vulnerabilities |
|||
| [Content] Forwarded from TWCERTCC-200-202610-00000028 The Cisco Meraki development team discovered multiple security vulnerabilities during an internal security review and has completed the necessary patches. Currently, no evidence has been found indicating that these vulnerabilities are being actively exploited. To help customers deploy security updates in a timely manner and simplify the vulnerability disclosure process, Cisco has publicly released the relevant vulnerability information and recommended remediation measures. CVE-2026-76463, CVSS: 8.8, Improper Access Control Vulnerability. CVE-2026-76464, CVSS: 9.6, Improper Restriction of Operations within the Bounds of a Memory Buffer. CVE-2026-76470, CVSS: 8.8, Incorrect Calculation. CVE-2026-76472, CVSS: 8.8, Improper Handling of Special Elements. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] Cisco Meraki Campus Gateway version 32.2, Cisco Meraki Campus Gateway version 33.1, Cisco Meraki MG Cellular Gateway version 26.1, Cisco Meraki MR Wireless Access Point Software version 30.7, Cisco Meraki MR Wireless Access Point Software version 31.1, Cisco Meraki MR Wireless Access Point Software version 32.2, Cisco Meraki MR Wireless Access Point Software version 33.1, Cisco Meraki MS Series Switch Software version 18.1, Cisco Meraki MS Series Switch Software IOS XE version 17.15, Cisco Meraki MS Series Switch Software IOS XE version 17.18, Cisco Meraki MS Series Switch Software IOS XE version 26.1, Cisco Meraki MV Smart Camera version 7, Cisco Meraki MX Security and SD-WAN Appliance version 18.1, Cisco Meraki MX Security and SD-WAN Appliance version 19.2, Cisco Meraki MX Security and SD-WAN Appliance version 26.1, Cisco Meraki MX Security and SD-WAN Appliance version 26.2 |
|||
| [Recommended Actions] Please update to the following versions: Cisco Meraki Campus Gateway version 32.2.5 or later (inclusive), Cisco Meraki Campus Gateway version 33.1.4 or later (inclusive), Cisco Meraki MG Cellular Gateway version 26.1.4 or later (inclusive), Cisco Meraki MR Wireless Access Point Software version 30.7.3 or later (inclusive), Cisco Meraki MR Wireless Access Point Software version 31.1.8.1 or later (inclusive), Cisco Meraki MR Wireless Access Point Software version 32.2.5 or later (inclusive), Cisco Meraki MR Wireless Access Point Software version 33.1.3 or later (inclusive), Cisco Meraki MS Series Switch Software version 18.1.9 or later (inclusive), Cisco Meraki MS Series Switch Software IOS XE version 17.15.6 or later (inclusive), Cisco Meraki MS Series Switch Software IOS XE version 17.18.4.1 or later (inclusive), Cisco Meraki MS Series Switch Software IOS XE version 26.1.2 or later (inclusive), Cisco Meraki MV Smart Camera version 8.0 or later (inclusive), Cisco Meraki MX Security and SD-WAN Appliance version 18.107.14 or later (inclusive), Cisco Meraki MX Security and SD-WAN Appliance version 19.2.9 or later (inclusive), Cisco Meraki MX Security and SD-WAN Appliance version 26.1.7 or later (inclusive), Cisco Meraki MX Security and SD-WAN Appliance version 26.2.3 or later (inclusive) |
|||
|
[Reference] |
|||
(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
Organizer:
Computer Center