CVE-2026-76472: high-severity vulnerability in Cisco Campus Gateway Software
Cisco Meraki Security Hardening Release October 2026 - Improper Neutralization of Special Elements Vulnerabilities
Published
18Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.8
exploitation probability
—
observed exploitation
nono source reports it
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-76472 are related to issues with improper neutralization of special elements that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-74.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Cisco · Cisco Campus Gateway SoftwareCisco · Cisco Meraki MR Wireless Access Points SoftwareCisco · Cisco Meraki MV FirmwareCisco · Cisco Meraki MX FirmwareRelated CVEs — Cisco Campus Gateway Software
In the same product, most dangerous first.
CVE-2026-76467HIGHCisco Meraki Software Hardening Release - Resource Lifetime Management VulnerabilitiesEPSS —CVE-2026-76470HIGHCisco Meraki Hardening Release - Incorrect Calculation VulnerabilitiesEPSS —CVE-2026-76469HIGHCisco Meraki Security Hardening Release: October 2026 Insufficient Control Flow Management VulnerabilitiesEPSS —CVE-2026-76468HIGHCisco Meraki Hardening Release - Input Validation VulnerabilitiesEPSS —CVE-2026-76464CRITICALCisco Meraki Hardening Release October 2026 - Buffer Management VulnerabilitiesEPSS —CVE-2026-76463HIGHCisco Meraki Security Hardening Release: October 2026 - Improper Access Control VulnerabilitiesEPSS —