As cited
Copy frozen at (site build).
vulnerabilities
NCSC-2026-0409 Vulnerabilities fixed in Cisco APIC
Cisco released patches for multiple vulnerabilities in Cisco Application Policy Infrastructure Controller (APIC), including insufficient input validation in the web-based management application programming interface (API) that allows authenticated administrators to execute arbitrary commands with root privileges. Additional flaws exist in export policies functionality with inadequate access controls, enabling unauthorized access to sensitive files and privilege escalation to root level, along with issues related to improper access control, input handling, and resource management.
Why it matters: Network infrastructure operators running APIC must patch immediately, as authenticated administrators with valid credentials can achieve complete system compromise through command execution or privilege escalation.
- Source published
- First seen by Cybersecurity Tracker