CVE-2026-76463
Received Received - Intake

Improper Access Control in Cisco Networking Software

Publication date: 2026-10-07

Last updated on: 2026-10-07

Assigner: Cisco Systems, Inc.

Description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76463 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-07
Last Modified
2026-10-07
Generated
2026-10-07
AI Q&A
2026-10-07
EPSS Evaluated
N/A
NVD
CVE-2026-76463
EUVD
EUVD-2026-94475

Affected Vendors & Products

Showing 117 associated CPEs
Vendor Product Version / Range
Cisco Cisco Campus Gateway Software CG 33.1.3
Cisco Cisco Meraki MR Wireless Access Points Software MR 33.1.2
Cisco Cisco Meraki MR Wireless Access Points Software MR 30.6
Cisco Cisco Meraki MR Wireless Access Points Software MR 32.1.7
Cisco Cisco Meraki MR Wireless Access Points Software MR 32.2.3
Cisco Cisco Meraki MR Wireless Access Points Software MR 32.2.4
Cisco Cisco Meraki MR Wireless Access Points Software MR 33.1.1
Cisco Cisco Meraki MV Firmware 4.20
Cisco Cisco Meraki MV Firmware 5.0
Cisco Cisco Meraki MV Firmware 5.1
Cisco Cisco Meraki MV Firmware 5.2
Cisco Cisco Meraki MV Firmware 5.3
Cisco Cisco Meraki MV Firmware 5.4
Cisco Cisco Meraki MV Firmware 5.4.1
Cisco Cisco Meraki MV Firmware 5.5
Cisco Cisco Meraki MV Firmware 5.5.1
Cisco Cisco Meraki MV Firmware 5.6
Cisco Cisco Meraki MV Firmware 5.6.1
Cisco Cisco Meraki MV Firmware 6.0
Cisco Cisco Meraki MV Firmware 6.0.1
Cisco Cisco Meraki MV Firmware 5.6.2
Cisco Cisco Meraki MV Firmware 6.0.2
Cisco Cisco Meraki MV Firmware 6.1
Cisco Cisco Meraki MV Firmware 6.1.1
Cisco Cisco Meraki MV Firmware 6.1.2
Cisco Cisco Meraki MV Firmware 6.2
Cisco Cisco Meraki MV Firmware 6.2.1
Cisco Cisco Meraki MV Firmware 6.2.2
Cisco Cisco Meraki MV Firmware 6.3
Cisco Cisco Meraki MV Firmware 6.3.2
Cisco Cisco Meraki MV Firmware 2.0
Cisco Cisco Meraki MV Firmware 2.1
Cisco Cisco Meraki MV Firmware 2.2
Cisco Cisco Meraki MV Firmware 3.0
Cisco Cisco Meraki MV Firmware 3.1
Cisco Cisco Meraki MV Firmware 3.2
Cisco Cisco Meraki MV Firmware 3.3
Cisco Cisco Meraki MV Firmware 3.4
Cisco Cisco Meraki MV Firmware 3.5
Cisco Cisco Meraki MV Firmware 3.6
Cisco Cisco Meraki MV Firmware 3.7
Cisco Cisco Meraki MV Firmware 3.8
Cisco Cisco Meraki MV Firmware 3.9
Cisco Cisco Meraki MV Firmware 3.10
Cisco Cisco Meraki MV Firmware 3.11
Cisco Cisco Meraki MV Firmware 3.12
Cisco Cisco Meraki MV Firmware 3.13
Cisco Cisco Meraki MV Firmware 3.14
Cisco Cisco Meraki MV Firmware 3.15
Cisco Cisco Meraki MV Firmware 3.16
Cisco Cisco Meraki MV Firmware 3.17
Cisco Cisco Meraki MV Firmware 3.18
Cisco Cisco Meraki MV Firmware 3.19
Cisco Cisco Meraki MV Firmware 3.20
Cisco Cisco Meraki MV Firmware 3.21
Cisco Cisco Meraki MV Firmware 3.22
Cisco Cisco Meraki MV Firmware 3.23
Cisco Cisco Meraki MV Firmware 3.24
Cisco Cisco Meraki MV Firmware 3.25
Cisco Cisco Meraki MV Firmware 3.26
Cisco Cisco Meraki MV Firmware 3.27
Cisco Cisco Meraki MV Firmware 3.28
Cisco Cisco Meraki MV Firmware 3.29
Cisco Cisco Meraki MV Firmware 3.30
Cisco Cisco Meraki MV Firmware 3.31
Cisco Cisco Meraki MV Firmware 3.32
Cisco Cisco Meraki MV Firmware 3.33
Cisco Cisco Meraki MV Firmware 3.34
Cisco Cisco Meraki MV Firmware 3.35
Cisco Cisco Meraki MV Firmware 3.36
Cisco Cisco Meraki MV Firmware 4.0
Cisco Cisco Meraki MV Firmware 4.1
Cisco Cisco Meraki MV Firmware 4.2
Cisco Cisco Meraki MV Firmware 4.3
Cisco Cisco Meraki MV Firmware 4.4
Cisco Cisco Meraki MV Firmware 4.5
Cisco Cisco Meraki MV Firmware 4.6
Cisco Cisco Meraki MV Firmware 4.7
Cisco Cisco Meraki MV Firmware 4.8
Cisco Cisco Meraki MV Firmware 4.9
Cisco Cisco Meraki MV Firmware 4.10
Cisco Cisco Meraki MV Firmware 4.11
Cisco Cisco Meraki MV Firmware 4.12
Cisco Cisco Meraki MV Firmware 4.13
Cisco Cisco Meraki MV Firmware 4.14
Cisco Cisco Meraki MV Firmware 4.15
Cisco Cisco Meraki MV Firmware 4.16
Cisco Cisco Meraki MV Firmware 4.17
Cisco Cisco Meraki MV Firmware 4.18
Cisco Cisco Meraki MV Firmware 4.18.1
Cisco Cisco Meraki MV Firmware 4.19
Cisco Cisco Meraki MV Firmware MV 7.3
Cisco Cisco Meraki MV Firmware MV 7.3.1
Cisco Cisco Meraki MV Firmware MV 7.3.2
Cisco Cisco Meraki MV Firmware MV 7.2.1
Cisco Cisco Meraki MV Firmware MV 7.2.2
Cisco Cisco Meraki MX Firmware 16.2
Cisco Cisco Meraki MX Firmware 16.3
Cisco Cisco Meraki MX Firmware 16.4
Cisco Cisco Meraki MX Firmware 16.5
Cisco Cisco Meraki MX Firmware 16.6
Cisco Cisco Meraki MX Firmware 17.3
Cisco Cisco Meraki MX Firmware 17.6
Cisco Cisco Meraki MX Firmware 17.7
Cisco Cisco Meraki MX Firmware 17.8
Cisco Cisco Meraki MX Firmware 17.9
Cisco Cisco Meraki MX Firmware 17.10
Cisco Cisco Meraki MX Firmware 18.1
Cisco Cisco Meraki MX Firmware 18.2
Cisco Cisco Meraki MX Firmware 19.1
Cisco Cisco Meraki MX Firmware MX 18.211.2
Cisco Cisco Meraki MX Firmware MX 26.2.1
Cisco Cisco Meraki MX Firmware MX 19.2.8
Cisco Cisco Meraki MX Firmware MX 26.2.2
Cisco Cisco Meraki MX Firmware MX 26.1.4
Cisco Cisco Meraki MX Firmware MX 26.1.5
Cisco Cisco Meraki MX Firmware MX 26.1.6

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-76463 is an improper access control vulnerability (CWE-284) in multiple Cisco Meraki products. It involves issues with authorization, authentication, privilege management, or bypasses that could allow unauthorized access or actions. Cisco discovered these flaws internally and released software updates to fix them.

Detection Guidance

Detection requires checking software versions against Cisco's fixed releases. Use Cisco Meraki Dashboard to verify device firmware versions. For CLI-based systems, commands like 'show version' or 'show running-config' may help identify affected products.

Impact Analysis

This vulnerability could allow attackers to gain unauthorized access to affected Cisco Meraki devices, potentially leading to data breaches, network compromise, or disruption of services. The high CVSS score (8.8) indicates significant risk, including confidentiality and integrity impacts.

Compliance Impact

Improper access control vulnerabilities like CWE-284 can lead to unauthorized data access, which may violate GDPR's data protection requirements and HIPAA's safeguards for protected health information. Non-compliance risks include fines, legal penalties, and reputational damage.

Mitigation Strategies

Immediately upgrade affected Cisco Meraki products to the fixed software versions provided by Cisco. Disable unnecessary services and enforce strict access controls. Monitor network traffic for unusual activity.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76463. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart