Cisco Cisco Application Policy Infrastructure Controller (APIC)

• CVE-2026-76500 Critical 9.8 Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Control of a Resource Through its Lifetime Vulnerabilities 0.3%
• CVE-2026-76498 Critical 9.8 Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Access Control Vulnerabilities 0.3%
• CVE-2026-76499 Critical 9.8 Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities 0.3%
• CVE-2026-76488 Medium 6.5 Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability 0.3%
• CVE-2026-20321 Medium 6.5 Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability 0.4%
• CVE-2026-20107 Medium 5.5 Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability <0.1%
• CVE-2025-20119 Medium 6.0 Cisco Application Policy Infrastructure Controller Authenticated Local Denial of Service Vulnerability 0.1%
• CVE-2025-20118 Medium 4.4 Cisco Application Policy Infrastructure Controller Authenticated Command Injection Due to Sensitive Disclosure Vulnerability 0.2%
• CVE-2025-20117 Medium 5.1 Cisco Application Policy Infrastructure Controller Authenticated Command Injection Vulnerability 0.2%
• CVE-2025-20116 Medium 4.8 Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability 0.3%
• CVE-2024-20478 Medium 6.5 Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability 0.7%
• CVE-2024-20279 Medium 4.3 Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability 0.3%
• CVE-2023-20230 Medium 5.4 A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to read, modify, or delete n 0.4%
• CVE-2023-20011 High 8.8 Cisco Application Policy Infrastructure Controller and Cisco Cloud Network Controller Cross-Site Request Forgery Vulnerability 0.4%
• CVE-2021-1582 Medium 5.4 Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability 0.6%
• CVE-2021-1581 Medium 6.5 Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities 1.1%
• CVE-2021-1580 Medium 6.5 Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities 1.8%
• CVE-2021-1579 High 8.1 Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability 2.1%
• CVE-2021-1578 High 8.8 Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability 2.0%
• CVE-2021-1577 Critical 9.1 Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability 1.3%
• CVE-2020-3335 Medium 5.5 Cisco Application Services Engine Software Authorization Vulnerability 0.3%
• CVE-2020-3333 Medium 5.3 Cisco Application Services Engine Software Unauthenticated Event Policies Update Vulnerability 1.0%
• CVE-2020-3139 Medium 5.3 Cisco Application Policy Infrastructure Controller Out Of Band Management IP Tables Bypass Vulnerability 1.0%