{"id":"CVE-2026-76499","title":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review","summary":"As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted …","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-707"],"vendor":"Cisco","product":"Cisco Application Policy Infrastructure Controller (APIC)","affected":["application_policy_infrastructure_controller_apic 5.2(1g)","application_policy_infrastructure_controller_apic 5.2(2e)","application_policy_infrastructure_controller_apic 5.2(2f)","application_policy_infrastructure_controller_apic 5.2(2g)","application_policy_infrastructure_controller_apic 5.2(2h)","application_policy_infrastructure_controller_apic 5.2(3f)","application_policy_infrastructure_controller_apic 5.2(3e)","application_policy_infrastructure_controller_apic 5.2(3g)","application_policy_infrastructure_controller_apic 5.2(4d)","application_policy_infrastructure_controller_apic 5.2(4e)","application_policy_infrastructure_controller_apic 5.2(5d)","application_policy_infrastructure_controller_apic 5.2(5c)","application_policy_infrastructure_controller_apic 6.0(1g)","application_policy_infrastructure_controller_apic 5.2(5e)","application_policy_infrastructure_controller_apic 5.2(4f)","application_policy_infrastructure_controller_apic 5.2(6e)","application_policy_infrastructure_controller_apic 6.0(1j)","application_policy_infrastructure_controller_apic 5.2(6g)","application_policy_infrastructure_controller_apic 5.2(7f)","application_policy_infrastructure_controller_apic 5.2(7g)","application_policy_infrastructure_controller_apic 6.0(2h)","application_policy_infrastructure_controller_apic 5.2(6h)","application_policy_infrastructure_controller_apic 5.2(4h)","application_policy_infrastructure_controller_apic 5.2(8d)","application_policy_infrastructure_controller_apic 6.0(2j)","application_policy_infrastructure_controller_apic 5.2(8e)","application_policy_infrastructure_controller_apic 6.0(3d)","application_policy_infrastructure_controller_apic 6.0(3e)","application_policy_infrastructure_controller_apic 5.2(8f)","application_policy_infrastructure_controller_apic 5.2(8g)","application_policy_infrastructure_controller_apic 5.3(1d)","application_policy_infrastructure_controller_apic 5.2(8h)","application_policy_infrastructure_controller_apic 6.0(4c)","application_policy_infrastructure_controller_apic 5.3(2a)","application_policy_infrastructure_controller_apic 5.2(8i)","application_policy_infrastructure_controller_apic 6.0(5h)","application_policy_infrastructure_controller_apic 5.3(2b)","application_policy_infrastructure_controller_apic 6.0(3g)","application_policy_infrastructure_controller_apic 6.0(5j)","application_policy_infrastructure_controller_apic 5.3(2c)","application_policy_infrastructure_controller_apic 6.0(6c)","application_policy_infrastructure_controller_apic 6.1(1f)","application_policy_infrastructure_controller_apic 6.0(7e)","application_policy_infrastructure_controller_apic 5.3(2d)","application_policy_infrastructure_controller_apic 6.0(8d)","application_policy_infrastructure_controller_apic 6.0(8e)","application_policy_infrastructure_controller_apic 6.1(2f)","application_policy_infrastructure_controller_apic 6.0(8f)","application_policy_infrastructure_controller_apic 5.3(2e)","application_policy_infrastructure_controller_apic 6.1(2g)"],"published":"2026-10-07","updated":"2026-10-07","sourceUpdated":"2026-10-07T18:17:30.330","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-76499","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-apic-UOXWtfh","label":"psirt@cisco.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total","timestamp":"2026-10-07T17:47:36.467311Z"},"ingestedAt":"2026-10-07T16:38:22.243Z","slug":"CVE-2026-76499","body":"## Overview\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.\r\n\r\nThe vulnerabilities tracked by CVE-2026-76499 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-707.\r\n \n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}