CVE-2026-76469
Cisco Meraki Security Hardening Release: October 2026 Insufficient Control Flow Management Vulnerabilities
- Published
- Updated
- Reserved
- Assigned by
- cisco
Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76469 are related to insufficient control flow management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-691.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| ciscoCNA (assigner) | 3.1 | High7.4 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |
| NVDNVD · Awaiting Analysis | 3.1 | High7.4 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.15% · top 96% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.4.
Weakness
Affected products
Cisco · Cisco Campus Gateway Software
- affected CG 33.1.3
Cisco · Cisco Meraki MR Wireless Access Points Software
- affected MR 33.1.2
- affected MR 30.6
- affected MR 32.1.7
- affected MR 32.2.3
- affected MR 32.2.4
- affected MR 33.1.1
Cisco · Cisco Meraki MV Firmware
- affected 4.20
- affected 5.0
- affected 5.1
- affected 5.2
- affected 5.3
- affected 5.4
- affected 5.4.1
- affected 5.5
- affected 5.5.1
- affected 5.6
- affected 5.6.1
- affected 6.0
- affected 6.0.1
- affected 5.6.2
- affected 6.0.2
- affected 6.1
- affected 6.1.1
- affected 6.1.2
- affected 6.2
- affected 6.2.1
- affected 6.2.2
- affected 6.3
- affected 6.3.2
- affected 2.0
- affected 2.1
- affected 2.2
- affected 3.0
- affected 3.1
- affected 3.2
- affected 3.3
- affected 3.4
- affected 3.5
- affected 3.6
- affected 3.7
- affected 3.8
- affected 3.9
- affected 3.10
- affected 3.11
- affected 3.12
- affected 3.13
- and 49 more
Cisco · Cisco Meraki MX Firmware
- affected 16.2
- affected 16.3
- affected 16.4
- affected 16.5
- affected 16.6
- affected 17.3
- affected 17.6
- affected 17.7
- affected 17.8
- affected 17.9
- affected 17.10
- affected 18.1
- affected 18.2
- affected 19.1
- affected MX 18.211.2
- affected MX 26.2.1
- affected MX 19.2.8
- affected MX 26.2.2
- affected MX 26.1.4
- affected MX 26.1.5
- affected MX 26.1.6
What to do
Exploitation: The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.
References (1)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2026-76469)Record last updated .