CVE-2026-76499 PUBLISHED

Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities

Assigner: cisco
Reserved: 19.08.2026 Published: 07.10.2026 Updated: 07.10.2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-76499 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-707.  

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 9.8

Product Status

Vendor Cisco
Product Cisco Application Policy Infrastructure Controller (APIC)
Versions Default: unknown
  • Version 5.2(1g) is affected
  • Version 5.2(2e) is affected
  • Version 5.2(2f) is affected
  • Version 5.2(2g) is affected
  • Version 5.2(2h) is affected
  • Version 5.2(3f) is affected
  • Version 5.2(3e) is affected
  • Version 5.2(3g) is affected
  • Version 5.2(4d) is affected
  • Version 5.2(4e) is affected
  • Version 5.2(5d) is affected
  • Version 5.2(5c) is affected
  • Version 6.0(1g) is affected
  • Version 5.2(5e) is affected
  • Version 5.2(4f) is affected
  • Version 5.2(6e) is affected
  • Version 6.0(1j) is affected
  • Version 5.2(6g) is affected
  • Version 5.2(7f) is affected
  • Version 5.2(7g) is affected
  • Version 6.0(2h) is affected
  • Version 5.2(6h) is affected
  • Version 5.2(4h) is affected
  • Version 5.2(8d) is affected
  • Version 6.0(2j) is affected
  • Version 5.2(8e) is affected
  • Version 6.0(3d) is affected
  • Version 6.0(3e) is affected
  • Version 5.2(8f) is affected
  • Version 5.2(8g) is affected
  • Version 5.3(1d) is affected
  • Version 5.2(8h) is affected
  • Version 6.0(4c) is affected
  • Version 5.3(2a) is affected
  • Version 5.2(8i) is affected
  • Version 6.0(5h) is affected
  • Version 5.3(2b) is affected
  • Version 6.0(3g) is affected
  • Version 6.0(5j) is affected
  • Version 5.3(2c) is affected
  • Version 6.0(6c) is affected
  • Version 6.1(1f) is affected
  • Version 6.0(7e) is affected
  • Version 5.3(2d) is affected
  • Version 6.0(8d) is affected
  • Version 6.0(8e) is affected
  • Version 6.1(2f) is affected
  • Version 6.0(8f) is affected
  • Version 5.3(2e) is affected
  • Version 6.1(2g) is affected
  • Version 5.3(2f) is affected
  • Version 6.0(9c) is affected
  • Version 6.1(3f) is affected
  • Version 6.0(9d) is affected
  • Version 6.0(6g) is affected
  • Version 6.0(6h) is affected
  • Version 6.0(8h) is affected
  • Version 6.1(3g) is affected
  • Version 6.1(4h) is affected
  • Version 6.0(9e) is affected
  • Version 6.1(5e) is affected
  • Version 6.2(1f) is affected
  • Version 6.2(1g) is affected
  • Version 6.0(9f) is affected
  • Version 6.2(2e) is affected

Exploits

The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.

References

Problem Types

  • Improper Neutralization cwe