We handle all your technical problems so you can focus on growing your business.
A white wireless access point mounted on a ceiling cable tray next to bundled network cables.
CybersecurityPractical insight for your business.

Cisco Fixes Critical Flaws Across Meraki Firewalls, Wi-Fi and Switches. Some Fixes Are Still On the Way.

Cisco's October 2026 Meraki Security Hardening Release fixes flaws rated up to 9.6 out of 10 in Meraki security appliances, access points, switches, cameras and gateways. None are known to be exploited, but there is no workaround besides updating.

Kevin R.

3 min read

Photo by Valentin Lacoste on Unsplash

The takeaway

Have whoever manages your Meraki Dashboard schedule the fixed firmware for each device type, and track the access point, switch and gateway builds that Cisco says are still coming.

On Wednesday, October 7, 2026, Cisco published the Meraki Security Hardening Release, a batch of fixes for Meraki network equipment. Cisco rates the most serious issue 9.6 out of 10 and says the flaws affect devices “regardless of device configuration.”

Cisco says the flaws are “not known to be actively exploited,” and that there are no workarounds besides updating. Some of the fixed versions aren’t available yet.

What Cisco says

  • Affected products: Meraki MX security appliances, MR wireless access points, MS switches, MV cameras, MG cellular gateways and Campus Gateways.
  • How they were found: during Cisco’s own internal security testing, “using existing testing processes as well as frontier AI models.”
  • Severity: up to 9.6 out of 10. The scoring Cisco publishes for that top-rated issue lists the attack vector as “adjacent,” meaning an attacker would need access to the local network rather than coming in from the open internet.
  • Update: Cisco revised the advisory on October 8 to add a fixed release for MX appliances on the 18.1 branch.

First fixed firmware

Meraki productFirst fixed firmware, according to Cisco
MX security appliances18.107.14 (18.1 branch), 26.1.7 or 26.2.3; 19.2.9 for Z3 devices only
MR access points30.7.3, 31.1.8.1 or 33.1.3; 32.2.5 due late October 2026
MS switches18.1.9 due mid-October 2026; IOS XE 17.15.6, 17.18.4.1 or 26.1.2
MG cellular gateways26.1.4
MV cameras8.0
Campus Gateways32.2.5 due late October 2026; 33.1.4 due mid-November 2026

Cisco says that if 18.107.14 or 19.2.9 doesn’t appear as an update option, contact Meraki technical support.

Who is affected

Businesses whose network runs on Meraki equipment, which is managed through the cloud-based Meraki Dashboard. If you aren’t sure, ask your IT provider whether your firewall, Wi-Fi or switches are Meraki.

What to do

Have whoever manages your Dashboard open Organization > Monitor > Firmware upgrades and schedule a fixed version that matches each device’s model and release branch.

Two cautions:

  • Check the target version. Meraki’s firmware documentation says scheduled upgrades default to its “Recommended Release.” Confirm that version is at or above the fixed one in the table.
  • Track the pending builds. If your access points are on 32.2, your switches are on 18.1, or you use Campus Gateways, the fix isn’t out yet. Ask when it will be installed once Cisco releases it.

Firmware upgrades can briefly interrupt the network, so schedule them outside business hours.

If you’d like a second opinion on your network’s firmware and update routine, NightSquawk Tech offers a free assessment.

Sources

Editorial note: This article was drafted with AI assistance from Cisco’s security advisories and Meraki documentation, linked above. NightSquawk Tech did not test these vulnerabilities. Version numbers and menu paths are as published on October 9, 2026, and Cisco’s scheduled release dates may change.