Vulnerability details
CVE-2026-76499
Cisco Application Policy Infrastructure Controller
Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities
CVSS 3.1
9.8Critical
Official description
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76499 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-707.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.8Critical | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(1g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(2e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(2f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(2g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(2h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(3e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(3f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(3g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(4d) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(4e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(4f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(4h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(5c) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(5d) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(5e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(6e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(6g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(6h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(7f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(7g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(8d) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(8e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(8f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(8g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(8h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.2(8i) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.3(1d) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.3(2a) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.3(2b) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.3(2c) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.3(2d) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.3(2e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 5.3(2f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(1g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(1j) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(2h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(2j) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(3d) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(3e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(3g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(4c) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(5h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(5j) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(6c) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(6g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(6h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(7e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(8d) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(8e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(8f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(8h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(9c) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(9d) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(9e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.0(9f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.1(1f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.1(2f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.1(2g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.1(3f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.1(3g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.1(4h) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.1(5e) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.2(1f) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.2(1g) | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Application Policy Infrastructure Controller (APIC) | 6.2(2e) | CVEProject cvelistV5 (CNA) |
References and advisories
2
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-10-07
- Last updated
- 2026-11-07
- State
- Published
- Assigner (CNA)
- cisco
Exploit prediction (EPSS)
0.32%
Probability of exploitation in 30 days
25.8%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-707Improper Neutralization