Cisco Campus Gateway Software injection

Summaryinfo

A vulnerability has been found in Cisco Campus Gateway Software, Meraki MR Wireless Access Points Software, Meraki MX and Meraki MV and classified as very critical. The impacted element is an unknown function. The manipulation leads to injection. This vulnerability is listed as CVE-2026-76472. The attack must be carried out locally. There is no available exploit. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Cisco Campus Gateway Software, Meraki MR Wireless Access Points Software, Meraki MX and Meraki MV (the affected version unknown) and classified as very critical. This issue affects an unknown part. The manipulation with an unknown input leads to a injection vulnerability. Using CWE to declare the problem leads to CWE-74. The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-76472 are related to issues with improper neutralization of special elements that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-74.

It is possible to read the advisory at sec.cloudapps.cisco.com. The identification of this vulnerability is CVE-2026-76472 since 08/19/2026. The exploitation is known to be easy. Attacking locally is a requirement. Additional levels of successful authentication are necessary for exploitation. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 10/07/2026). The attack technique deployed by this issue is T1055 according to MITRE ATT&CK.

Upgrading eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Wireless LAN Software

Vendor

• Cisco

Name

• Campus Gateway Software
• Meraki MR Wireless Access Points Software
• Meraki MV
• Meraki MX

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion