- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/13/2026, Cisco Application Policy Infrastructure Controller (APIC) recorded 5 security vulnerabilities in the last 90 days, of which 3 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Cisco Application Policy Infrastructure Controller (APIC) and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
.svg){kind=icon}
CVE-2026-76500Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Control of a Resource Through its Lifetime VulnerabilitiesCVE-2026-76499Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization VulnerabilitiesCVE-2026-76498Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Access Control VulnerabilitiesCVE-2026-76488Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure VulnerabilityCVE-2026-20321Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-76500Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Control of a Resource Through its Lifetime Vulnerabilities | Exploitation statusNot exploited | FixNo |
| Published10/07/2026 |
| SeverityCritical |
CVE-2026-76499Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities | Exploitation statusNot exploited | FixNo | Published10/07/2026 | SeverityCritical |
|---|
CVE-2026-76498Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Access Control Vulnerabilities | Exploitation statusNot exploited | FixNo | Published10/07/2026 | SeverityCritical |
|---|
CVE-2026-76488Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability | Exploitation statusNot exploited | FixNo | Published10/07/2026 | SeverityMedium |
|---|
CVE-2026-20321Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability | Exploitation statusNot exploited | FixNo | Published10/07/2026 | SeverityMedium |
|---|
CVE-2026-20107Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability | Exploitation statusNot exploited | FixNo | Published02/25/2026 | SeverityMedium |
|---|
CVE-2025-20119Cisco Application Policy Infrastructure Controller Authenticated Local Denial of Service Vulnerability | Exploitation statusNot exploited | FixNo | Published02/26/2025 | SeverityMedium |
|---|
CVE-2025-20118Cisco Application Policy Infrastructure Controller Authenticated Command Injection Due to Sensitive Disclosure Vulnerability | Exploitation statusNot exploited | FixNo | Published02/26/2025 | SeverityMedium |
|---|
CVE-2025-20117Cisco Application Policy Infrastructure Controller Authenticated Command Injection Vulnerability | Exploitation statusNot exploited | FixNo | Published02/26/2025 | SeverityMedium |
|---|
CVE-2025-20116Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability | Exploitation statusNot exploited | FixNo | Published02/26/2025 | SeverityMedium |
|---|
CVE-2024-20478Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability | Exploitation statusNot exploited | FixNo | Published08/28/2024 | SeverityMedium |
|---|
CVE-2024-20279Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability | Exploitation statusNot exploited | FixNo | Published08/28/2024 | SeverityMedium |
|---|
CVE-2023-20230CVE-2023-20230 | Exploitation statusNot exploited | FixNo | Published08/23/2023 | SeverityMedium |
|---|
CVE-2023-20011Cisco Application Policy Infrastructure Controller and Cisco Cloud Network Controller Cross-Site Request Forgery Vulnerability | Exploitation statusNot exploited | FixNo | Published02/23/2023 | SeverityHigh |
|---|
CVE-2021-1582Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability | Exploitation statusNot exploited | FixNo | Published08/25/2021 | SeverityMedium |
|---|
CVE-2021-1581Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities | Exploitation statusNot exploited | FixNo | Published08/25/2021 | SeverityMedium |
|---|
CVE-2021-1580Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities | Exploitation statusNot exploited | FixNo | Published08/25/2021 | SeverityMedium |
|---|
CVE-2021-1579Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability | Exploitation statusNot exploited | FixNo | Published08/25/2021 | SeverityHigh |
|---|
CVE-2021-1578Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability | Exploitation statusNot exploited | FixNo | Published08/25/2021 | SeverityHigh |
|---|
CVE-2021-1577Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability | Exploitation statusNot exploited | FixNo | Published08/25/2021 | SeverityCritical |
|---|
CVE-2020-3335Cisco Application Services Engine Software Authorization Vulnerability | Exploitation statusNot exploited | FixNo | Published06/03/2020 | SeverityMedium |
|---|
CVE-2020-3333Cisco Application Services Engine Software Unauthenticated Event Policies Update Vulnerability | Exploitation statusNot exploited | FixNo | Published06/03/2020 | SeverityMedium |
|---|
CVE-2020-3139Cisco Application Policy Infrastructure Controller Out Of Band Management IP Tables Bypass Vulnerability | Exploitation statusNot exploited | FixNo | Published01/26/2020 | SeverityMedium |
|---|
CVE-2019-1889Cisco Application Policy Infrastructure Controller REST API Privilege Escalation Vulnerability | Exploitation statusNot exploited | FixYes | Published07/04/2019 | SeverityHigh |
|---|
CVE-2019-1838Cisco Application Policy Infrastructure Controller Web-Based Management Interface Cross-Site Scripting Vulnerability | Exploitation statusNot exploited | FixYes | Published05/03/2019 | SeverityMedium |
|---|
CVE-2019-1692Cisco Application Policy Infrastructure Controller Web-Based Management Interface Usage Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes | Published05/03/2019 | SeverityMedium |
|---|
CVE-2019-1682Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability | Exploitation statusNot exploited | FixYes | Published05/03/2019 | SeverityHigh |
|---|
CVE-2019-1587Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Filter Query Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes | Published05/03/2019 | SeverityMedium |
|---|
CVE-2019-1586Cisco Application Policy Infrastructure Controller Recoverable Encryption Key Vulnerability | Exploitation statusNot exploited | FixYes | Published05/03/2019 | SeverityMedium |
|---|
CVE-2019-1690Cisco Application Policy Infrastructure Controller IPv6 Link-Local Address Vulnerability | Exploitation statusNot exploited | FixYes | Published03/11/2019 | SeverityMedium |
|---|
30 Results | Page 1 of 1