Source: Ministry of education information & communication security contingency platform
| Publication Number | TACERT-ANA-2026101604100909 | Publication Time | 2026-10-16 16:03:12 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026-10-16 16:03:12 |
| Impact Level | Low | ||
| [Subject] 【Vulnerability Alert】Cisco Application Policy Infrastructure Controller Has Three Critical Security Vulnerabilities |
|||
| [Content] Forwarded from TWCERTCC-200-202610-00000027 The Cisco Application Policy Infrastructure Controller development team discovered multiple security vulnerabilities during an internal security review and has completed the necessary patches. Currently, no evidence has been found indicating that these vulnerabilities are being actively exploited. To help customers deploy security updates in a timely manner and simplify the vulnerability disclosure process, Cisco has publicly released the relevant vulnerability information and recommended remediation measures. CVE-2026-76498, CVSS: 9.8, Improper Access Control Vulnerability. CVE-2026-76499, CVSS: 9.8, Improper Handling Vulnerability. CVE-2026-76500, CVSS: 9.8, Improper Control During Product Lifecycle. Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] Cisco APIC version 5.3 and earlier (inclusive), Cisco APIC version 6.0, Cisco APIC version 6.1, Cisco APIC version 6.2 |
|||
| [Recommended Actions] Please update to the following versions: Cisco APIC version 6.0 (9h) or later (inclusive), Cisco APIC version 6.1 (6g) or later (inclusive), Cisco APIC version 6.2 (3g) or later (inclusive) |
|||
|
[Reference] |
|||