Cisco APIC (Product): news timeline & CVEs

Cisco Patches a Dozen Critical Vulnerabilities

Cisco patched 35 flaws, including more than a dozen critical bugs, and reports no known exploitation.

Cisco patched 35 vulnerabilities, including more than a dozen critical-severity bugs, across Meraki, License On-Prem, NX-OS, and Application Policy Infrastructure Controller. Unauthenticated License On-Prem issues include unauthorized access (CVE-2026-20328) and denial of service (CVE-2026-76454). On NX-OS, CVE-2026-76471 and CVE-2026-76465 could let remote unauthenticated attackers run code as root or cause a denial of service, while three NGOAM flaws affect only Nexus 3000 and 9000 switches with that feature enabled. Cisco also fixed a publicly disclosed high-severity SSRF in Finesse, CVE-2026-20362, and said it is not aware of exploitation.

SecurityWeek15:28 UTC · 8h agoVulnerability CVE-2026-76464 CVE-2026-20328 CVE-2026-76454+14 CVEs

Cisco security advisory (AV26-1020)

Canada’s Cyber Centre urged updates after Cisco advisories hit Nexus, Meraki, NX-OS, UCS, and contact-center products.

Canadian Centre for Cyber Security alert AV26-1020, dated October 8, 2026, points to Cisco vulnerabilities in Nexus 3000 and 9000 switches, UCS fabric interconnects, multiple Meraki products, NX-OS, APIC, and contact-center software including Finesse, CCE, and CCX. Fixed releases are listed for several products, with some Meraki and contact-center updates scheduled into late 2026 and early 2027. The alert gives no CVE identifiers and does not report exploitation. Administrators are told to review Cisco’s advisories and apply updates as they become available.

Canadian Centre for Cyber Security14:49 UTC · 8h agoAdvisory 3 sources

Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability

Admin-authenticated attackers can read sensitive Cisco APIC files, including keys usable for root access.

Cisco disclosed an unauthorized file-access flaw in the export policies functionality of Application Policy Infrastructure Controller. An authenticated remote attacker with valid administrative credentials can submit crafted UI values and read sensitive files from the underlying filesystem, including key materials that could enable root privilege escalation. The issue is caused by insufficient access control to file-system resources. The text does not report active exploitation.

Cisco Security AdvisoriesOct 7, 16:00 UTC · 1d agoVulnerability 3 sources

Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability

Admin-authenticated attackers can inject API commands and run them as root on Cisco APIC.

Cisco disclosed a command-injection vulnerability in the web-based management API of Application Policy Infrastructure Controller. An authenticated remote attacker with administrative credentials can send crafted API input and execute arbitrary commands as root because user-controlled command arguments are insufficiently validated. Cisco has released software updates. The advisory excerpt does not describe observed exploitation.

Cisco Security AdvisoriesOct 7, 16:00 UTC · 1d agoVulnerability 3 sources1

Cisco Advance Notification for Publication of October 7, 2026, Security Advisories

Cisco will publish October 7 security advisories and hardening fixes for NX-OS, Meraki, APIC, and related products.

Cisco PSIRT said it will publish security advisories on October 7, 2026, disclosing vulnerabilities and fixed software for several products. The notice covers security hardening releases for Application Policy Infrastructure Controller, Finesse License On-Prem (formerly Smart Software Manager On-Prem), Meraki, and NX-OS. NX-OS coverage includes MDS 9000, Nexus 3000, 7000, and 9000 Series switches, Nexus 9000 in ACI mode, and UCS Fabric Interconnects. No CVE identifiers or active exploitation were mentioned, and Cisco urged customers to upgrade after publication.

Cisco Security AdvisoriesSep 30, 16:00 UTC · 8d agoAdvisory

Cisco APIC

Timeline5 articles

Related CVEsby mentions

Appears with

Cisco Patches a Dozen Critical Vulnerabilities

Cisco security advisory (AV26-1020)

Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability

Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability

Cisco Advance Notification for Publication of October 7, 2026, Security Advisories