【Vulnerability Alert】Cisco Meraki has 4 critical security vulnerabilities

• Subject:Cisco Meraki has 4 critical security vulnerabilities

• Description:
  • Forwarded from the TWCERT/CC Security Alert TWCERTCC-200-202610-00000028
  • The Cisco Meraki development team discovered multiple security vulnerabilities during an internal security review, which have now been fixed. There is currently no evidence that these vulnerabilities have been actively exploited. To help customers deploy security updates in a timely manner and streamline the vulnerability disclosure process, Cisco has published the related vulnerability information and remediation recommendations.
  • CVE-2026-76463, CVSS: 8.8, improper access control vulnerability.
  • CVE-2026-76464, CVSS: 9.6, improper operational restrictions on memory buffers.
  • CVE-2026-76470, CVSS: 8.8, calculation error.
  • CVE-2026-76472, CVSS: 8.8, improper handling of special elements.
• Affected Platforms:
  • Cisco Meraki Campus Gateway version 32.2, Cisco Meraki Campus Gateway version 33.1, Cisco Meraki MG Cellular Gateway version 26.1, Cisco Meraki MR Wireless Access Point Software version 30.7, Cisco Meraki MR Wireless Access Point Software version 31.1, Cisco Meraki MR Wireless Access Point Software version 32.2, Cisco Meraki MR Wireless Access Point Software version 33.1, Cisco Meraki MS Series Switch Software version 18.1, Cisco Meraki MS Series Switch Software IOS XE version 17.15, Cisco Meraki MS Series Switch Software IOS XE version 17.18, Cisco Meraki MS Series Switch Software IOS XE version 26.1, Cisco Meraki MV Smart Camera version 7, Cisco Meraki MX Security and SD-WAN Appliance version 18.1, Cisco Meraki MX Security and SD-WAN Appliance version 19.2, Cisco Meraki MX Security and SD-WAN Appliance version 26.1, Cisco Meraki MX Security and SD-WAN Appliance version 26.2
• Recommended Actions:
  • Please update to the following versions: Cisco Meraki Campus Gateway version 32.2.5 and later, Cisco Meraki Campus Gateway version 33.1.4 and later, Cisco Meraki MG Cellular Gateway version 26.1.4 and later, Cisco Meraki MR Wireless Access Point Software version 30.7.3 and later, Cisco Meraki MR Wireless Access Point Software version 31.1.8.1 and later, Cisco Meraki MR Wireless Access Point Software version 32.2.5 and later, Cisco Meraki MR Wireless Access Point Software version 33.1.3 and later, Cisco Meraki MS Series Switch Software version 18.1.9 and later, Cisco Meraki MS Series Switch Software IOS XE version 17.15.6 and later, Cisco Meraki MS Series Switch Software IOS XE version 17.18.4.1 and later, Cisco Meraki MS Series Switch Software IOS XE version 26.1.2 and later, Cisco Meraki MV Smart Camera version 8.0 and later, Cisco Meraki MX Security and SD-WAN Appliance version 18.107.14 and later, Cisco Meraki MX Security and SD-WAN Appliance version 19.2.9 and later, Cisco Meraki MX Security and SD-WAN Appliance version 26.1.7 and later, Cisco Meraki MX Security and SD-WAN Appliance version 26.2.3 and later
• References:
  1. https://www.twcert.org.tw/tw/cp-169-11292-a381c-1.html

Computer and Communication Center
Network System Division