Login Request a demo
CA
Product
Cisco Application Policy Infrastructure Controller (APIC)
by Cisco · last CVE Oct 7, 2026
13
CVEs
0
On KEV
9.8
Max CVSS
5
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 3High 1Medium 9Low 0
Severity
All severities13Critical3High1Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cisco Application Policy Infrastructure Controller (APIC) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-76500
9.8
0%
Oct 7
Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Control of a Resource Through its Lifetime Vulnerabilities
Affected: 5.2(1g); 5.2(2e); 5.2(2f); 5.2(2g); 5.2(2h); 5.2(3f); +34 more
CVE-2026-76498
9.8
0%
Oct 7
Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Access Control Vulnerabilities
Affected: 5.2(1g); 5.2(2e); 5.2(2f); 5.2(2g); 5.2(2h); 5.2(3f); +34 more
CVE-2026-76499
9.8
0%
Oct 7
Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities
Affected: 5.2(1g); 5.2(2e); 5.2(2f); 5.2(2g); 5.2(2h); 5.2(3f); +34 more
CVE-2024-20478
7.2
1%
Aug 28
Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability
Affected: 3.2(8d); 2.2(1o); 1.2(2h); 2.2(2i); 1.2(1k); 2.2(1k); +34 more
CVE-2025-20117
6.7
0%
Feb 26
Cisco Application Policy Infrastructure Controller Authenticated Command Injection Vulnerability
Affected: 3.2(8d); 3.2(1m); 3.2(5e); 4.1(2m); 3.2(41d); 3.2(3s); +34 more
CVE-2026-76488
6.5
0%
Oct 7
Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability
Affected: 5.2(1g); 5.2(2e); 5.2(2f); 5.2(2g); 5.2(2h); 5.2(3f); +34 more
CVE-2026-20321
6.5
0%
Oct 7
Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability
Affected: 5.3(1d); 5.3(2a); 5.3(2b); 5.3(2c); 5.3(2d); 5.3(2e); +5 more
CVE-2019-1690
6.5
1%
Mar 11
Cisco Application Policy Infrastructure Controller IPv6 Link-Local Address Vulnerability
Affected: before 4.2(0.21c)
CVE-2025-20119
5.7
0%
Feb 26
Cisco Application Policy Infrastructure Controller Authenticated Local Denial of Service Vulnerability
Affected: 3.2(8d); 3.2(1m); 3.2(5e); 4.1(2m); 3.2(41d); 3.2(3s); +34 more
CVE-2026-20107
5.5
0%
Feb 25
Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability
Affected: 6.1(1f); 6.1(2f); 6.1(2g); 6.1(3f); 6.1(3g)
CVE-2025-20116
4.8
0%
Feb 26
Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability
Affected: 3.2(8d); 3.2(1m); 3.2(5e); 4.1(2m); 3.2(41d); 3.2(3s); +34 more
CVE-2025-20118
4.4
0%
Feb 26
Cisco Application Policy Infrastructure Controller Authenticated Command Injection Due to Sensitive Disclosure Vulnerability
Affected: 3.2(8d); 3.2(1m); 3.2(5e); 4.1(2m); 3.2(41d); 3.2(3s); +34 more
CVE-2024-20279
4.3
0%
Aug 28
Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability
Affected: 3.2(8d); 2.2(1o); 1.2(2h); 2.2(2i); 1.2(1k); 2.2(1k); +34 more
Showing 13