Cisco Issues Critical Security Updates for Meraki Networking Devices

Cisco has released security updates to address multiple vulnerabilities affecting its Meraki networking equipment, including wireless access points, switches, cellular gateways, smart cameras and security appliances.

The security advisory, published on 7 October 2026 and updated on 15 October, covers seven vulnerability groups identified during Cisco’s internal security testing. The most severe issue carries a CVSS score of 9.6 out of 10, placing it in the critical severity category.

Cisco says the vulnerabilities were discovered through internal testing and are not known to be actively exploited. The company has issued software updates to address the security weaknesses and warned that no workarounds are available for the issues. <escape>Cisco security advisory.</escape>

Multiple vulnerability classes identified

The vulnerabilities cover several areas of software security, including improper access controls, memory handling errors, inadequate input validation, resource management problems, calculation errors and command injection.

The most serious vulnerability group, tracked as CVE-2026-76464, has a maximum CVSS score of 9.6. It relates to memory-buffer handling weaknesses, which can include buffer overflows and out-of-bounds writes.

Other issues include CVE-2026-76463, associated with improper access control, and CVE-2026-76472, which covers improper handling of special elements that can lead to command or operating-system injection.

The seven identifiers covered by the advisory are:

• CVE-2026-76463 — Improper access control.
• CVE-2026-76464 — Memory-buffer handling weaknesses.
• CVE-2026-76467 — Improper resource lifecycle management.
• CVE-2026-76468 — Improper input validation.
• CVE-2026-76469 — Insufficient control-flow management.
• CVE-2026-76470 — Incorrect calculations or numeric conversions.
• CVE-2026-76472 — Improper neutralisation of special elements, including command injection.

Cisco has grouped multiple internally identified weaknesses under these vulnerability categories to streamline its disclosure and remediation process.

Which products are affected?

The advisory identifies several product families as vulnerable, regardless of device configuration. These include:

• Cisco Campus Gateways.
• Meraki MG Cellular Gateways.
• Meraki MR Wireless Access Points.
• Meraki MS Series Switches.
• Meraki MV Smart Cameras.
• Meraki MX Security and SD-WAN Appliances.

The precise exposure depends on the software release running on each device. Cisco has published a list of fixed releases for the affected product families, and administrators should check the advisory to identify the appropriate update for their equipment.

Updates available, but no workarounds

Cisco recommends upgrading affected devices to the relevant fixed software releases. Updates include Meraki wireless access point releases 30.7.3, 31.1.8.1 and 33.1.3, depending on the installed software branch, alongside fixes for switches, cameras, cellular gateways and security appliances.

Some fixes are scheduled for later October or November 2026, so not every affected software branch necessarily has its update available yet. Administrators should consult Cisco’s current advisory for the latest release information and availability.

The company also advises customers to ensure devices have sufficient memory and that their existing hardware and software configurations remain supported before upgrading.

No known exploitation reported

Cisco’s Product Security Incident Response Team says it is not aware of public announcements or malicious use of the vulnerabilities covered by the advisory.

However, the absence of known exploitation does not remove the risk posed by the underlying weaknesses, particularly given the critical maximum severity rating and the lack of workarounds.

Organisations using affected Meraki equipment should review their installed software versions, prioritise applicable security updates and monitor Cisco’s advisory for changes to patch availability.

The full advisory, including affected releases and remediation guidance, is available on the <escape>Cisco Security website.</escape>