{"id":"CVE-2026-76498","title":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted …","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-284"],"vendor":"Cisco","product":"Cisco Application Policy Infrastructure Controller (APIC)","affected":["application_policy_infrastructure_controller_apic 5.2(1g)","application_policy_infrastructure_controller_apic 5.2(2e)","application_policy_infrastructure_controller_apic 5.2(2f)","application_policy_infrastructure_controller_apic 5.2(2g)","application_policy_infrastructure_controller_apic 5.2(2h)","application_policy_infrastructure_controller_apic 5.2(3f)","application_policy_infrastructure_controller_apic 5.2(3e)","application_policy_infrastructure_controller_apic 5.2(3g)","application_policy_infrastructure_controller_apic 5.2(4d)","application_policy_infrastructure_controller_apic 5.2(4e)","application_policy_infrastructure_controller_apic 5.2(5d)","application_policy_infrastructure_controller_apic 5.2(5c)","application_policy_infrastructure_controller_apic 6.0(1g)","application_policy_infrastructure_controller_apic 5.2(5e)","application_policy_infrastructure_controller_apic 5.2(4f)","application_policy_infrastructure_controller_apic 5.2(6e)","application_policy_infrastructure_controller_apic 6.0(1j)","application_policy_infrastructure_controller_apic 5.2(6g)","application_policy_infrastructure_controller_apic 5.2(7f)","application_policy_infrastructure_controller_apic 5.2(7g)","application_policy_infrastructure_controller_apic 6.0(2h)","application_policy_infrastructure_controller_apic 5.2(6h)","application_policy_infrastructure_controller_apic 5.2(4h)","application_policy_infrastructure_controller_apic 5.2(8d)","application_policy_infrastructure_controller_apic 6.0(2j)","application_policy_infrastructure_controller_apic 5.2(8e)","application_policy_infrastructure_controller_apic 6.0(3d)","application_policy_infrastructure_controller_apic 6.0(3e)","application_policy_infrastructure_controller_apic 5.2(8f)","application_policy_infrastructure_controller_apic 5.2(8g)","application_policy_infrastructure_controller_apic 5.3(1d)","application_policy_infrastructure_controller_apic 5.2(8h)","application_policy_infrastructure_controller_apic 6.0(4c)","application_policy_infrastructure_controller_apic 5.3(2a)","application_policy_infrastructure_controller_apic 5.2(8i)","application_policy_infrastructure_controller_apic 6.0(5h)","application_policy_infrastructure_controller_apic 5.3(2b)","application_policy_infrastructure_controller_apic 6.0(3g)","application_policy_infrastructure_controller_apic 6.0(5j)","application_policy_infrastructure_controller_apic 5.3(2c)","application_policy_infrastructure_controller_apic 6.0(6c)","application_policy_infrastructure_controller_apic 6.1(1f)","application_policy_infrastructure_controller_apic 6.0(7e)","application_policy_infrastructure_controller_apic 5.3(2d)","application_policy_infrastructure_controller_apic 6.0(8d)","application_policy_infrastructure_controller_apic 6.0(8e)","application_policy_infrastructure_controller_apic 6.1(2f)","application_policy_infrastructure_controller_apic 6.0(8f)","application_policy_infrastructure_controller_apic 5.3(2e)","application_policy_infrastructure_controller_apic 6.1(2g)"],"published":"2026-10-07","updated":"2026-10-07","sourceUpdated":"2026-10-07T17:17:01.670","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-76498","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-apic-UOXWtfh","label":"psirt@cisco.com"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-10-07T16:38:22.244Z","ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total","timestamp":"2026-10-07T18:03:47.917127Z"},"slug":"CVE-2026-76498","body":"## Overview\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-76498 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}