---
id: CVE-2026-76498
title: >-
  As part of Cisco's ongoing commitment to proactive security and product
  quality, the Cisco Application Policy Infrastructure Controller (APIC)
  engineering team has conducted a comprehensive internal security review
summary: >-
  As part of Cisco's ongoing commitment to proactive security and product
  quality, the Cisco Application Policy Infrastructure Controller (APIC)
  engineering team has conducted a comprehensive internal security review. This
  review resulted …
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-284
vendor: Cisco
product: Cisco Application Policy Infrastructure Controller (APIC)
affected:
  - application_policy_infrastructure_controller_apic 5.2(1g)
  - application_policy_infrastructure_controller_apic 5.2(2e)
  - application_policy_infrastructure_controller_apic 5.2(2f)
  - application_policy_infrastructure_controller_apic 5.2(2g)
  - application_policy_infrastructure_controller_apic 5.2(2h)
  - application_policy_infrastructure_controller_apic 5.2(3f)
  - application_policy_infrastructure_controller_apic 5.2(3e)
  - application_policy_infrastructure_controller_apic 5.2(3g)
  - application_policy_infrastructure_controller_apic 5.2(4d)
  - application_policy_infrastructure_controller_apic 5.2(4e)
  - application_policy_infrastructure_controller_apic 5.2(5d)
  - application_policy_infrastructure_controller_apic 5.2(5c)
  - application_policy_infrastructure_controller_apic 6.0(1g)
  - application_policy_infrastructure_controller_apic 5.2(5e)
  - application_policy_infrastructure_controller_apic 5.2(4f)
  - application_policy_infrastructure_controller_apic 5.2(6e)
  - application_policy_infrastructure_controller_apic 6.0(1j)
  - application_policy_infrastructure_controller_apic 5.2(6g)
  - application_policy_infrastructure_controller_apic 5.2(7f)
  - application_policy_infrastructure_controller_apic 5.2(7g)
  - application_policy_infrastructure_controller_apic 6.0(2h)
  - application_policy_infrastructure_controller_apic 5.2(6h)
  - application_policy_infrastructure_controller_apic 5.2(4h)
  - application_policy_infrastructure_controller_apic 5.2(8d)
  - application_policy_infrastructure_controller_apic 6.0(2j)
  - application_policy_infrastructure_controller_apic 5.2(8e)
  - application_policy_infrastructure_controller_apic 6.0(3d)
  - application_policy_infrastructure_controller_apic 6.0(3e)
  - application_policy_infrastructure_controller_apic 5.2(8f)
  - application_policy_infrastructure_controller_apic 5.2(8g)
  - application_policy_infrastructure_controller_apic 5.3(1d)
  - application_policy_infrastructure_controller_apic 5.2(8h)
  - application_policy_infrastructure_controller_apic 6.0(4c)
  - application_policy_infrastructure_controller_apic 5.3(2a)
  - application_policy_infrastructure_controller_apic 5.2(8i)
  - application_policy_infrastructure_controller_apic 6.0(5h)
  - application_policy_infrastructure_controller_apic 5.3(2b)
  - application_policy_infrastructure_controller_apic 6.0(3g)
  - application_policy_infrastructure_controller_apic 6.0(5j)
  - application_policy_infrastructure_controller_apic 5.3(2c)
  - application_policy_infrastructure_controller_apic 6.0(6c)
  - application_policy_infrastructure_controller_apic 6.1(1f)
  - application_policy_infrastructure_controller_apic 6.0(7e)
  - application_policy_infrastructure_controller_apic 5.3(2d)
  - application_policy_infrastructure_controller_apic 6.0(8d)
  - application_policy_infrastructure_controller_apic 6.0(8e)
  - application_policy_infrastructure_controller_apic 6.1(2f)
  - application_policy_infrastructure_controller_apic 6.0(8f)
  - application_policy_infrastructure_controller_apic 5.3(2e)
  - application_policy_infrastructure_controller_apic 6.1(2g)
published: '2026-10-07'
updated: '2026-10-07'
sourceUpdated: '2026-10-07T17:17:01.670'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-76498'
references:
  - url: >-
      https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-apic-UOXWtfh
    label: psirt@cisco.com
tags:
  - nvd
  - cve.org
ingestedAt: '2026-10-07T16:38:22.244Z'
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-10-07T18:03:47.917127Z'
---

## Overview

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-76498 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.