Vulnerabilities exploited in Cisco APIC

🗓️ 09 Oct 2026 07:12:17Reported by NCSCType

ncsc🔗 advisories.ncsc.nl👁 6 Views

Authorized attackers with administrative rights can execute commands as root on Cisco APIC.

Reporter	Title	Published	Views	Family All 46
BDU FSTEC	The vulnerability of the Cisco Application Policy Infrastructure Controller (APIC) management tool lies in its insufficient control over resources during its existence. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	9 Oct 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco Application Policy Infrastructure Controller (APIC) management tool arises from insufficient protection of message integrity or data structure correctness. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	9 Oct 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco Application Policy Infrastructure Controller (APIC) management tool, related to deficiencies in access control, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	9 Oct 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco Application Policy Infrastructure Controller (APIC) management tool, related to deficiencies in access control, allows a perpetrator to gain unauthorized access to protected information.	9 Oct 202600:00	–	bdu_fstec
Circl	CVE-2026-76498	7 Oct 202617:31	–	circl
Circl	CVE-2026-76499	7 Oct 202617:31	–	circl
Circl	CVE-2026-76500	7 Oct 202618:10	–	circl
Cisco	Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability	7 Oct 202616:00	–	cisco
Cisco	Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability	7 Oct 202616:00	–	cisco
Cisco	Cisco Application Policy Infrastructure Controller Security Hardening Release: October 2026	7 Oct 202616:00	–	cisco

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-cmdinj-L6VR4E7
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-info-priv-enAdB5vD
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-apic-UOXWtfh
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-fBn58ELx

09 Oct 2026 07:12Current

7.9High risk

Vulners AI Score7.9

CVSS 3.19.8

EPSS0.00434

SSVC

Cisco APIC web-based management API export policy arbitrary commands root privileges privilege escalation