CVE-2026-76468: Improper Input Validation in Cisco Cisco Campus Gateway Software

This vulnerability involves improper input validation in Cisco Campus Gateway Software, identified during an internal security review by Cisco's networking engineering team. It is tracked as CVE-2026-76468 and categorized under CWE-20. The vulnerability has a CVSS 3.1 base score of 8.2, indicating high severity, with an attack vector of network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), unchanged scope (S:U), no confidentiality impact (C:N), high integrity impact (I:H), and low availability impact (A:L). The affected versions span many discrete releases from 2.0 through 19.1. Cisco has issued a software hardening release to address this and other vulnerabilities discovered internally.

Exploitation of this vulnerability could allow an unauthenticated attacker to cause a high impact on the integrity of the Cisco Campus Gateway Software and a low impact on its availability. There is no confidentiality impact. The vulnerability does not require privileges or user interaction to exploit. No known exploits are reported in the wild at this time.

Cisco has released a software hardening update that addresses this vulnerability as part of a comprehensive internal security review. Users should apply the official Cisco updates corresponding to their affected software versions to remediate this issue. Patch status is not explicitly confirmed in the provided data; therefore, verify with Cisco's official advisories for the latest remediation guidance.