CISCO Security Advisory
Published Date: Not specified
CVE: CVE-2026-76488
Advisory Summary
🧩 🔎 Cisco APIC Unauthorized File Access via Export Policies (CVE-2026-76488)
- Cisco Application Policy Infrastructure Controller (APIC) has a vulnerability in its export policies functionality.
- A remote attacker with valid administrative credentials may be able to access sensitive files on the device.
- Exploitation relies on crafted values in specific UI fields, indicating a control-plane input validation / authorization gap.
- The attacker could retrieve sensitive files from the underlying filesystem.
- The advisory notes access to key materials, which could enable privilege escalation to root on:
- the affected APIC, and
- managed switches under APIC control.
- ✅ Cisco has released software updates to address the issue.
- 🚫 No workaround is provided for this vulnerability.
- enforce strong MFA (where applicable),
- restrict admin sessions to trusted management networks,
- harden RBAC and reduce the number of users/accounts with admin rights.
- monitor for suspicious export-policy actions and malformed UI field submissions,
- ensure event logs are centralized and retained for investigation.
- identify APIC deployments managing switches,
- confirm impacted version ranges and plan coordinated remediation.
🧠
🔗
-2026-76488
Reference: Vendor Advisory