CVE-2026-76464: Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco Cisco Campus Gateway Software

CVE-2026-76464 concerns buffer management issues in Cisco Campus Gateway Software that allow improper restriction of operations within memory buffer bounds, classified under CWE-119. The vulnerability affects many explicit versions ranging from 2.0 through 19.1, including multiple minor releases. It carries a CVSS v3.1 score of 9.6 with attack vector as adjacent network, low attack complexity, no privileges required, no user interaction, and a scope change. The impact includes high confidentiality, integrity, and availability losses. Cisco identified this issue internally and released a software hardening update to address it.

The vulnerability allows an attacker with adjacent network access to cause a complete compromise of confidentiality, integrity, and availability of the affected Cisco Campus Gateway Software. This can lead to full system compromise without requiring privileges or user interaction. The critical CVSS score reflects the severe potential impact on network infrastructure relying on this software.

Cisco has released a software hardening update that addresses this vulnerability as part of their internal security review. Users should apply the official patches or updates provided by Cisco for the affected versions. Since this is not a cloud service, remediation depends on deploying updated software versions. No known exploits are currently reported in the wild.