Skip to content
OpenAdvisories
High WID-SEC-2026-3818 5 CVEs

Cisco Application Policy Infrastructure Controller: Mehrere Schwachstellen

Published Oct 7, 2026 · Updated Oct 7, 2026 · de-DE

Vendor: Cisco Product: Application Policy Infrastructure Controller

Summary

Ein Angreifer kann mehrere Schwachstellen in Cisco Application Policy Infrastructure Controller ausnutzen, um sich erweiterte Berechtigungen zu verschaffen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.

Product

Der Cisco Application Policy Infrastructure Controller (APIC) ist die architektonische Hauptkomponente der Cisco Application Centric Infrastructure.

Vulnerabilities 5

  • Critical 9.8
    CVE-2026-76498

    Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Access Control Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening …

    Cisco Cisco Application Policy Infrastructure Controller (APIC) Network devices
  • Critical 9.8
    CVE-2026-76499

    Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening …

    Cisco Cisco Application Policy Infrastructure Controller (APIC) Network devices
  • Critical 9.8
    CVE-2026-76500

    Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Control of a Resource Through its Lifetime Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening …

    Cisco Cisco Application Policy Infrastructure Controller (APIC) Network devices
  • Medium 6.5
    CVE-2026-20321

    Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability

    A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to execute arbitrary commands as the root user. To exploit this vulnerability, the attacker must have v…

    Cisco Cisco Application Policy Infrastructure Controller (APIC) Network devices
  • Medium 6.5
    CVE-2026-76488

    Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability

    A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must h…

    Cisco Cisco Application Policy Infrastructure Controller (APIC) Network devices

Revision history

  1. #1

    Initiale Fassung

References