If a Campus Gateway or MG21/E was waiting on the October Meraki hardening release, reopen that patch ticket. Cisco now lists two previously planned fixes as available.
Original advisory October 7, 2026. Last verified November 9, 2026. Advisory cisco-sa-hardening-meraki-os-drbEX9GH.
What changed on November 9
Cisco’s v1.3 revision at 17:55 UTC removed the planned-release dates for Campus Gateway 32.2.5 and Meraki MG 4.1.4 for MG21/E. Cisco still lists Campus Gateway 33.1.4 for mid-November. Check Dashboard for the firmware offered to each device.
Check the installed branch
Cisco lists the affected product families regardless of device configuration. Match devices below the first fixed release to their branch and model. Cisco has no workaround.
| Product | Affected branch → first fixed release |
|---|---|
| Cisco Campus Gateway | 32.2 → 32.2.5 (available). 33.1 → 33.1.4 (Cisco estimates mid-November). |
| Meraki MG cellular gateways | 4.1 → 4.1.4 (available for MG21/E only). 26.1 → 26.1.4. |
| Meraki MR access points | 30.7 → 30.7.3 (Wi-Fi 5 Wave 2 only). 31.1 → 31.1.8.1 (MR45/55 only). 32.2 → 32.2.5. 33.1 → 33.1.3. |
| Meraki MS switches | 17.2 or 18.1 → 18.1.9. IOS XE 17.15 → 17.15.6. IOS XE 17.18 → 17.18.4.1. IOS XE 26.1 → 26.1.2. |
| Meraki MV cameras | 7 → 8.0. |
| Meraki MX security and SD-WAN appliances | 18.1 → 18.107.14. 19.2 → 19.2.9 (recommended for Z3 only). 26.1 → 26.1.7. 26.2 → 26.2.3. |
Cisco directs customers to Meraki Support if MX 18.107.14 or 19.2.9 is absent from the available updates. Cloud-configured Catalyst devices use the separate Cisco IOS XE hardening advisory linked by Cisco.
Severity and exploitation
Cisco rates the advisory Critical. Its grouped CVSS 3.1 base scores are CVE-2026-76463 (8.8), CVE-2026-76464 (9.6), CVE-2026-76467 (7.5), CVE-2026-76468 (8.2), CVE-2026-76469 (7.4), CVE-2026-76470 (8.8), and CVE-2026-76472 (8.8). The 9.6 vector specifies adjacent network access. Cisco PSIRT reports no known malicious use or public disclosure of the underlying flaws. The seven CVEs were absent from the checked CISA KEV catalog, so there is no KEV federal deadline for these entries.
MSP rollout
Suggested priority High for affected gateway branches where the fix is now available. Inventory model, installed firmware, and update eligibility in each customer Dashboard. Stage the supported update in a maintenance window. Confirm the running build, Dashboard connectivity, and representative traffic after rollout. Check cellular failover or gateway redundancy where configured. Keep Campus Gateway 33.1 on the patch list until Cisco confirms a supported build is available.
Official sources
Cisco PSIRT advisory and revision history · Cisco Support firmware matrix · CISA’s published KEV data