/
← Voltar ao feed
high

Cisco Secure Client Secure Firewall Posture module IPC flaw (CVE-2026-76462) allows local privilege escalation

1 fonte(s) · 1 atualização(ões) · publicado 21/10/2026 13:00 · coletado há 2 dias

Baseado só no resumo do feed. O site da fonte não liberou o texto completo para o Tifon, então esta análise saiu apenas do resumo publicado no feed e pode estar incompleta. Ela é atualizada quando outra fonte cobrir o assunto. Ler na fonte original ↗

Cisco disclosed a high-impact local privilege escalation vulnerability, CVE-2026-76462, in the Secure Firewall Posture module of Cisco Secure Client. The flaw is in the interprocess communication (IPC) channel and stems from insufficient validation of user-supplied input. An authenticated local attacker can send crafted IPC messages to a local socket and perform limited file write operations with SYSTEM or root privileges. The module is affected on Windows, macOS and Linux, but the primitive can be used to obtain full root on macOS and Linux, so Cisco rated the Security Impact Rating High rather than Medium as the score indicates. Cisco has released software updates and states that no workarounds exist. The article does not report exploitation in the wild.

Detalhes técnicos

  • Vector: local, authenticated; crafted IPC messages sent to a local socket.
  • Root cause: insufficient validation of user-supplied input in the IPC channel.
  • Impact: limited arbitrary file write as SYSTEM/root, which can be escalated to full root on macOS and Linux.
  • Affected platforms: Windows, macOS, Linux.

Remediação

  • Apply the software updates released by Cisco for Cisco Secure Client.
  • No workarounds are available.
  • Consult the Cisco advisory cisco-sa-sec-client-priv-esc-muF8eZdm for fixed release details.

Linha do tempo

  1. sec.cloudapps.cisco.com ↗ · pub. 21/10/2026 13:00 · coletado 21/10 14:01 primeiro registro só resumo do feed

    Cisco Secure Client Secure Firewall Posture module IPC flaw (CVE-2026-76462) allows local privilege escalation

    ler a análise desta fonte

    Cisco disclosed a high-impact local privilege escalation vulnerability, CVE-2026-76462, in the Secure Firewall Posture module of Cisco Secure Client. The flaw is in the interprocess communication (IPC) channel and stems from insufficient validation of user-supplied input. An authenticated local attacker can send crafted IPC messages to a local socket and perform limited file write operations with SYSTEM or root privileges. The module is affected on Windows, macOS and Linux, but the primitive can be used to obtain full root on macOS and Linux, so Cisco rated the Security Impact Rating High rather than Medium as the score indicates. Cisco has released software updates and states that no workarounds exist. The article does not report exploitation in the wild.

    Technical Details

    • Vector: local, authenticated; crafted IPC messages sent to a local socket.
    • Root cause: insufficient validation of user-supplied input in the IPC channel.
    • Impact: limited arbitrary file write as SYSTEM/root, which can be escalated to full root on macOS and Linux.
    • Affected platforms: Windows, macOS, Linux.

    Remediation

    • Apply the software updates released by Cisco for Cisco Secure Client.
    • No workarounds are available.
    • Consult the Cisco advisory cisco-sa-sec-client-priv-esc-muF8eZdm for fixed release details.