Cisco has published a Meraki security hardening release (advisory last updated Nov. 9, now marked final v1.3) for issues found in an internal review. Cisco says they’re not known to be exploited, and there are no workarounds: you have to update firmware.
What’s affected
Campus Gateways, Meraki MG cellular gateways, MR access points, MS switches, MV smart cameras, and MX security and SD-WAN appliances, regardless of configuration. Cisco grouped the findings into seven CVEs by weakness class. The highest score is CVE-2026-76464 at 9.6 (memory-safety issues). Others cover access control, input validation, injection and similar classes, with scores from 7.4 to 8.8.
What to do
Look up your product and train in the advisory and move to the listed fixed release. Examples: MX 26.1.7 or 26.2.3 (and 18.107.14 or 19.2.9 where TAC offers them), MR 32.2.5 or 33.1.3, MS 18.1.9, MG 26.1.4, MV 8.0, Campus Gateway 32.2.5 (33.1.4 is due mid-November). Some older trains are model-specific, so don’t guess: use Cisco’s table.
God Bless, and Use the Source!
