Threat level Severe
Contact
Critical 9.8
CVE-2026-76499

Cisco Cisco Application Policy Infrastructure Controller (APIC) — This review resulted in software hardening releases that address multiple internally discovered…

This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

WeaknessCWE-707
Published Updated Source NVD
Read vendor advisoryView on NVD
CVSS 3.1
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploit chance, 30 days
0.3%
Higher than 23% of all CVEs (EPSS)
Status
No known exploitation
Not in CISA KEV
Patch
Unknown
Check the vendor advisory

What happened

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-76499 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-707.
 

What to do

  1. 01Check whether you run Cisco Application Policy Infrastructure Controller (APIC), and which version.
  2. 02Follow the vendor advisory for a fix or a workaround.

References

Timeline · UTC

  1. Published to NVD
  2. NVD record updated

Also actively exploited

CVE-2026-764188.6Cisco Secure Firewall ASA Software and Cisco Secure FTD SoftwareCVE-2026-1146259.9Arista VeloCloud OrchestratorCVE-2026-1114979.8Google Brotli
Vendor
Cisco23 CVEs in 30 days
All Cisco CVEs

Other CVEs in Cisco Application Policy Infrastructure Controller (APIC)

2 more CVEs

All Cisco Application Policy Infrastructure Controller (APIC) CVEs
9.8Cisco Application Policy Infrastructure Controller (APIC) — improper access control.EPSS 0.3%9.8Cisco Cisco Application Policy Infrastructure Controller (APIC) — This review resulted in software hardening releases that address multiple internally discovered…EPSS 0.3%