CVE-2026-76500: Improper Control of a Resource Through its Lifetime in Cisco Cisco Application Policy Infrastructure Controller (APIC)

Cisco's internal security review uncovered multiple vulnerabilities in the Cisco Application Policy Infrastructure Controller (APIC), including CVE-2026-76500, which involves improper control of a resource through its lifetime (CWE-664). This vulnerability could allow an attacker to compromise system confidentiality, integrity, and availability, as reflected by the CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No detailed technical exploitation methods or affected versions are disclosed in the provided information.

The vulnerability has a critical impact on the affected system, potentially allowing unauthenticated remote attackers to fully compromise confidentiality, integrity, and availability of the Cisco APIC. However, no known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Cisco has conducted an internal review and released software hardening updates addressing multiple vulnerabilities, but no explicit patch or fix details for CVE-2026-76500 are provided in the available data.