Cisco Application Policy Infrastructure Controller Apic vulnerabilities

6 CVEs affecting Cisco Application Policy Infrastructure Controller Apic, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-76500, published 2026-10-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-20321, published 2026-10-07. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to execute arbitrary commands as the root…
CVE-2026-76500, published 2026-10-07. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal…
CVE-2026-76499, published 2026-10-07. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal…
CVE-2026-76498, published 2026-10-07. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal…
CVE-2026-76488, published 2026-10-07. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an…
CVE-2026-20107, published 2026-02-25. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. A vulnerability in the Object Model CLI component of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, local attacker to cause an affected device to reload…