CVE-2026-76498 is a vulnerability in Cisco Application Policy Infrastructure Controller
Published on October 7, 2026
Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Access Control Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities.
The vulnerabilities tracked by CVE-2026-76498 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284.
Vulnerability Analysis
CVE-2026-76498 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.
Weakness Type
What is an Authorization Vulnerability?
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVE-2026-76498 has been classified to as an Authorization vulnerability or weakness.
Products Associated with CVE-2026-76498
Want to know whenever a new CVE is published for Cisco Application Policy Infrastructure Controller? stack.watch will email you.
Affected Versions
Cisco Application Policy Infrastructure Controller (APIC):- Version 5.2(1g) is affected.
- Version 5.2(2e) is affected.
- Version 5.2(2f) is affected.
- Version 5.2(2g) is affected.
- Version 5.2(2h) is affected.
- Version 5.2(3f) is affected.
- Version 5.2(3e) is affected.
- Version 5.2(3g) is affected.
- Version 5.2(4d) is affected.
- Version 5.2(4e) is affected.
- Version 5.2(5d) is affected.
- Version 5.2(5c) is affected.
- Version 6.0(1g) is affected.
- Version 5.2(5e) is affected.
- Version 5.2(4f) is affected.
- Version 5.2(6e) is affected.
- Version 6.0(1j) is affected.
- Version 5.2(6g) is affected.
- Version 5.2(7f) is affected.
- Version 5.2(7g) is affected.
- Version 6.0(2h) is affected.
- Version 5.2(6h) is affected.
- Version 5.2(4h) is affected.
- Version 5.2(8d) is affected.
- Version 6.0(2j) is affected.
- Version 5.2(8e) is affected.
- Version 6.0(3d) is affected.
- Version 6.0(3e) is affected.
- Version 5.2(8f) is affected.
- Version 5.2(8g) is affected.
- Version 5.3(1d) is affected.
- Version 5.2(8h) is affected.
- Version 6.0(4c) is affected.
- Version 5.3(2a) is affected.
- Version 5.2(8i) is affected.
- Version 6.0(5h) is affected.
- Version 5.3(2b) is affected.
- Version 6.0(3g) is affected.
- Version 6.0(5j) is affected.
- Version 5.3(2c) is affected.
- Version 6.0(6c) is affected.
- Version 6.1(1f) is affected.
- Version 6.0(7e) is affected.
- Version 5.3(2d) is affected.
- Version 6.0(8d) is affected.
- Version 6.0(8e) is affected.
- Version 6.1(2f) is affected.
- Version 6.0(8f) is affected.
- Version 5.3(2e) is affected.
- Version 6.1(2g) is affected.
- Version 5.3(2f) is affected.
- Version 6.0(9c) is affected.
- Version 6.1(3f) is affected.
- Version 6.0(9d) is affected.
- Version 6.0(6g) is affected.
- Version 6.0(6h) is affected.
- Version 6.0(8h) is affected.
- Version 6.1(3g) is affected.
- Version 6.1(4h) is affected.
- Version 6.0(9e) is affected.
- Version 6.1(5e) is affected.
- Version 6.2(1f) is affected.
- Version 6.2(1g) is affected.
- Version 6.0(9f) is affected.
- Version 6.2(2e) is affected.