Improper Access Control Vulnerability in Cisco Application Policy Infrastructure Controller
CVE-2026-76498

9.8CRITICAL

Key Information:

Vendor

Cisco
Status
Cisco Application Policy Infrastructure Controller (apic)
Vendor
CVE Published:
7 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-76498?

The Cisco Application Policy Infrastructure Controller (APIC) has been found vulnerable to improper access control issues. This vulnerability falls under the Common Weakness Enumeration (CWE) category CWE-284. It was identified through an internal security review aimed at enhancing product quality and security. The discovered access control flaws could potentially allow unauthorized access to sensitive functions within the APIC, impacting system integrity and security. Users are advised to implement the latest software hardening releases provided by Cisco to mitigate these risks.

Affected Version(s)

Cisco Application Policy Infrastructure Controller (APIC) 5.2(1g)

Cisco Application Policy Infrastructure Controller (APIC) 5.2(2e)

Cisco Application Policy Infrastructure Controller (APIC) 5.2(2f)

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.