Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient access control to file system resources. An attacker could exploit this vulnerability by submitting crafted values in specific UI fields. A successful exploit could allow the attacker to access sensitive files from the underlying file system of an affected device, including key materials that could be used to elevate privileges to root on the affected APIC and on managed switches.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-76488 A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to acc… https://www.cve.org/CVERecord?id=CVE-2026-76488
CVE advisory (MEDIUM): CVE-2026-76488 - cisco: Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability. https://vulnipulse.com/advisories/cisco-cisco-sa-apic-info-priv-enadb5vd #CVE #CyberSecurity #Cisco #CiscoAPIC