Cisco patches seven Meraki and NX-OS flaws, including CVE-2026-76464 with CVSS 9.6

Cisco released fixes for seven internally discovered vulnerabilities in Meraki and NX-OS. The most severe, CVE-2026-76464 (CWE-119, CVSS 9.6), requires an adjacent-network position with no privileges or user interaction. Affected products include Meraki campus and cellular gateways, MR access points, MS switches, MV cameras and MX appliances.

• CVE-2026-76464: CWE-119, maximum CVSS 3.1 base score of 9.6
• Vector AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H requires adjacent network access
• Fixed releases span Campus Gateway 32.2.5 to MX 26.2.3 by train
• ZoomEye reports 620,353 assets matching app="Cisco Meraki"