CVE-2026-76498: Cisco Application Policy Infrastructure Controller (APIC) 5.2(1g), 5.2(2e), 5.2(2f), 5.2(2g), 5.2(2h), 5.2(3f)…

Affected technology

Cisco Application Policy Infrastructure Controller (APIC) · 5.2(1g), 5.2(2e), 5.2(2f), 5.2(2g), 5.2(2h), 5.2(3f), 5.2(3e), 5.2(3g), 5.2(4d), 5.2(4e), 5.2(5d), 5.2(5c), 6.0(1g), 5.2(5e), 5.2(4f), 5.2(6e), 6.0(1j), 5.2(6g), 5.2(7f), 5.2(7g), 6.0(2h), 5.2(6h), 5.2(4h), 5.2(8d), 6.0(2j), 5.2(8e), 6.0(3d), 6.0(3e), 5.2(8f), 5.2(8g), 5.3(1d), 5.2(8h), 6.0(4c), 5.3(2a), 5.2(8i), 6.0(5h), 5.3(2b), 6.0(3g), 6.0(5j), 5.3(2c), 6.0(6c), 6.1(1f), 6.0(7e), 5.3(2d), 6.0(8d), 6.0(8e), 6.1(2f), 6.0(8f), 5.3(2e), 6.1(2g), 5.3(2f), 6.0(9c), 6.1(3f), 6.0(9d), 6.0(6g), 6.0(6h), 6.0(8h), 6.1(3g), 6.1(4h), 6.0(9e), 6.1(5e), 6.2(1f), 6.2(1g), 6.0(9f), 6.2(2e)
Cisco

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.