Intel

CVE-2026-76488

Application Policy Infrastructure Controller: Permissions, Privileges, and Access Controls (CVE-2026-76488)

mediumEPSS 0.3%

Description

A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient access control to file system resources. An attacker could exploit this vulnerability by submitting crafted values in specific UI fields. A successful exploit could allow the attacker to access sensitive files from the underlying file system of an affected device, including key materials that could be used to elevate privileges to root on the affected APIC and on managed switches.

Source: BSI CSAFBSI WID PortalNVD (NIST)cvelistv5cisco_csafCVE.org (MITRE)

Affected products

The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

CiscoApplication Policy Infrastructure Controller
< 6.0(9h)fixed in 6.0(9h)< 6.1(3f)fixed in 6.1(3f)< 6.1(6g)fixed in 6.1(6g)< 6.2(3g)fixed in 6.2(3g)

Metrics

XIEM Effective CVSS
6.5
Source: nvd-v3
EPSS percentile
19.3 %
Elevated — this CVE ranks above at least 10% of all CVEs scored today.
KEV status
—
Show all metrics
Severity
medium
Priority score
65.49
Exploit maturity
no public PoC known
CVSS v3
6.5
EPSS score
0.3 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-10-07 17:17 UTC
CWE
CWE-264

Weakness classes (CWE)

References & sources

Reanalysis & status changes

Chronological NVD audit events for this CVE — reanalyses, CVSS updates, CPE diffs.

  1. CVE Modified2026-10-08 04:17 UTC· 134c704f-9b21-4f2e-91b3-4a467353bcc0
    • SSVC: {"id":"CVE-2026-76488","role":"CISA Coordinator","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalI…
    • SSVC: {"id":"CVE-2026-76488","role":"CISA Coordinator","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalI…
  2. CVE Modified2026-10-07 20:17 UTC· 134c704f-9b21-4f2e-91b3-4a467353bcc0
    • SSVC: {"id":"CVE-2026-76488","role":"CISA Coordinator","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalI…
  3. New CVE Received2026-10-07 17:17 UTC· psirt@cisco.com
    • Description: A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient access control to file system resources. An attacker could exploit this vulnerability by submitting crafted values in specific UI fields. A successful exploit could allow the attacker to access sensitive files from the underlying file system of an affected device, including key materials that could be used to elevate privileges to&nbsp;root on the affected APIC and on managed switches.
    • CVSS V3.1: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
    • CWE: CWE-264
    • Affected: New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/76xxx/CVE-2026-76488.json">CVE-2026-76488</a>

Linked advisories