Medium Rated CVE's Impacting Meraki MX - CVE-2026-20026, CVE-2026-20027

[Brash]

Just noting here for anyone who has to have tight controls around vulnerabilities in their environment.

Meraki MX's (along with FTD's and some IOS-XE devices) are affected by vulnerabilities related to the Snort Engine.

Advisory: Multiple Cisco Products Snort 3 Distributed Computing Environment/Remote Procedure Call Vulnerabilit...
CVE Base Score: 5.8
Fixed Release: There is currently no fixed release for Meraki MX noted in the security advisory

[RWelch]

Thank you for sharing (awareness).

[RaphaelL]

Curious to see which firmware train is going to receive the fix. 

Anything higher than 17.6 runs Snort3.

[jbright]

Cisco plans to release fixes for Cisco Meraki software in February 2026.

[BlakeRichardson]

Thanks for sharing.