Improper Neutralization Vulnerability in Cisco Application Policy Infrastructure Controller
CVE-2026-76499

9.8CRITICAL

Key Information:

Vendor

Cisco
Status
Cisco Application Policy Infrastructure Controller (apic)
Vendor
CVE Published:
7 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-76499?

Cisco's Application Policy Infrastructure Controller has been found to be susceptible to vulnerabilities related to improper neutralization. These issues are categorized under Common Weakness Enumeration (CWE) 707, which highlights critical flaws in input handling that could allow malicious actors to manipulate system behavior. In response, Cisco has implemented several software hardening releases designed to fortify the product against potential exploitation, thereby enhancing overall security and product integrity.

Affected Version(s)

Cisco Application Policy Infrastructure Controller (APIC) 5.2(1g)

Cisco Application Policy Infrastructure Controller (APIC) 5.2(2e)

Cisco Application Policy Infrastructure Controller (APIC) 5.2(2f)

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.