Cisco APIC export policies flaw (CVE-2026-76488) lets authenticated admins read sensitive files and escalate to root
Baseado só no resumo do feed. O site da fonte não liberou o texto completo para o Tifon, então esta análise saiu apenas do resumo publicado no feed e pode estar incompleta. Ela é atualizada quando outra fonte cobrir o assunto. Ler na fonte original ↗
Cisco disclosed CVE-2026-76488, a medium-severity vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC). An authenticated remote attacker with valid administrative credentials could read sensitive files from the underlying file system of an affected device. The files include key material that could be used to elevate privileges to root on the APIC and on managed switches. Cisco has released software updates, and no workarounds exist. The advisory was published as part of Cisco's October 7, 2026 advance notification bundle. The article does not report exploitation in the wild.
Technical Details
- The root cause is insufficient access control to file system resources in the export policies feature.
- An attacker exploits it by submitting crafted values in specific UI fields.
- Exploitation requires valid administrative credentials.
- Impact: disclosure of sensitive files, including key material, which enables privilege escalation to root on the APIC and on managed switches.
- Cisco Security Impact Rating: Medium.
Remediation
- Apply the Cisco software updates that address this vulnerability. No workarounds are available.
- See the Cisco APIC Security Hardening Release: October 2026 documentation for related fixes and improvements.
Linha do tempo
-
sec.cloudapps.cisco.com ↗ · pub. 07/10/2026 13:00 · coletado 19/10 18:01 primeiro registro só resumo do feed
Cisco APIC export policies flaw (CVE-2026-76488) lets authenticated admins read sensitive files and escalate to root
ler a análise desta fonte ocultar
Cisco disclosed CVE-2026-76488, a medium-severity vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC). An authenticated remote attacker with valid administrative credentials could read sensitive files from the underlying file system of an affected device. The files include key material that could be used to elevate privileges to root on the APIC and on managed switches. Cisco has released software updates, and no workarounds exist. The advisory was published as part of Cisco's October 7, 2026 advance notification bundle. The article does not report exploitation in the wild.
Technical Details
- The root cause is insufficient access control to file system resources in the export policies feature.
- An attacker exploits it by submitting crafted values in specific UI fields.
- Exploitation requires valid administrative credentials.
- Impact: disclosure of sensitive files, including key material, which enables privilege escalation to root on the APIC and on managed switches.
- Cisco Security Impact Rating: Medium.
Remediation
- Apply the Cisco software updates that address this vulnerability. No workarounds are available.
- See the Cisco APIC Security Hardening Release: October 2026 documentation for related fixes and improvements.