جزئیات آسیبپذیری
CVE-2026-76498
Cisco Application Policy Infrastructure Controller
Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Access Control Vulnerabilities
CVSS 3.1
9.8بحرانی
شرح رسمی (انگلیسی)
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76498 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 9.8بحرانی | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیبپذیر
| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(1g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(2e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(2f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(2g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(2h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(3e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(3f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(3g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(4d) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(4e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(4f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(4h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(5c) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(5d) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(5e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(6e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(6g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(6h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(7f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(7g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(8d) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(8e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(8f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(8g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(8h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(8i) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.3(1d) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.3(2a) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.3(2b) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.3(2c) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.3(2d) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.3(2e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.3(2f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(1g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(1j) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(2h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(2j) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(3d) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(3e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(3g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(4c) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(5h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(5j) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(6c) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(6g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(6h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(7e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(8d) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(8e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(8f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(8h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(9c) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(9d) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(9e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(9f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.1(1f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.1(2f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.1(2g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.1(3f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.1(3g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.1(4h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.1(5e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.2(1f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.2(1g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.2(2e) | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیبپذیریهای تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۷/۱۵
- آخرین بهروزرسانی
- ۱۴۰۵/۰۸/۱۶
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- cisco
پیشبینی بهرهبرداری (EPSS)
۰٫۳۱٪
احتمال بهرهبرداری در ۳۰ روز
۲۴٫۹٪
صدک (نسبت به همهی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهرهبرداری
- ندارد
- اثر فنی
- کامل
ضعفها (CWE)
- CWE-284Improper Access Control