CVE-2026-76488
Received Received - Intake

Insecure File Access in Cisco APIC via Export Policies

Publication date: 2026-10-07

Last updated on: 2026-10-07

Assigner: Cisco Systems, Inc.

Description
A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient access control to file system resources. An attacker could exploit this vulnerability by submitting crafted values in specific UI fields. A successful exploit could allow the attacker to access sensitive files from the underlying file system of an affected device, including key materials that could be used to elevate privileges to root on the affected APIC and on managed switches.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-07
Last Modified
2026-10-07
Generated
2026-10-07
AI Q&A
2026-10-07
EPSS Evaluated
N/A
NVD
CVE-2026-76488
EUVD
EUVD-2026-94469

Affected Vendors & Products

Showing 58 associated CPEs
Vendor Product Version / Range
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(1g)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(2e)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(2f)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(2g)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(2h)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(3f)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(3e)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(3g)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(4d)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(4e)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(5d)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(5c)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(1g)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(5e)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(4f)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(6e)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(1j)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(6g)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(7f)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(7g)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(2h)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(6h)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(4h)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(8d)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(2j)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(8e)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(3d)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(3e)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(8f)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(8g)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.3(1d)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(8h)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(4c)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.3(2a)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.2(8i)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(5h)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.3(2b)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(3g)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(5j)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.3(2c)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(6c)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.1(1f)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(7e)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.3(2d)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(8d)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(8e)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.1(2f)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(8f)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.3(2e)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.1(2g)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 5.3(2f)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(9c)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(9d)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(6g)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(6h)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(8h)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(9e)
Cisco Cisco Application Policy Infrastructure Controller (APIC) 6.0(9f)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-264 Permissions, Privileges, and Access Controls

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in Cisco Application Policy Infrastructure Controller (APIC) export policies. An authenticated remote attacker with admin credentials can exploit insufficient file system access controls by submitting crafted UI field values to access sensitive files. Successful exploitation may allow access to key materials enabling privilege escalation to root on the APIC and managed switches.

Detection Guidance

Detecting this vulnerability requires checking the version of Cisco APIC. Use the command 'show version' on the APIC CLI to verify if the installed version is 5.3 or earlier, 6.0, or 6.1. If so, the system is vulnerable.

Impact Analysis

An attacker could access sensitive files including key materials, leading to root-level compromise of the APIC and managed switches. This could result in full system control, data breaches, or unauthorized network access. Only users with valid admin credentials can exploit this remotely.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive files, including key materials that could escalate privileges. Such access may result in data breaches, violating compliance requirements under GDPR and HIPAA, which mandate strict access controls and protection of sensitive data.

Mitigation Strategies

Immediately upgrade Cisco APIC to fixed versions 6.0(9h) or 6.1(3f) as these address the vulnerability. No workarounds are available, so patching is required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76488. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart