CVE-2026-76488: Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability
A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient access control to file system resources. An attacker could exploit this vulnerability by submitting crafted values in specific UI fields. A successful exploit could allow the attacker to access sensitive files from the underlying file system of an affected device, including key materials that could be used to elevate privileges to root on the affected APIC and on managed switches.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker must be able to reach the affected APIC remotely and possess valid administrative credentials. The issue is not described as exploitable by unauthenticated or lower-privileged users.
What access could exploitation provide?
A successful exploit can expose sensitive files from the APIC underlying file system. The exposed material may include key materials that could be used to elevate privileges to root on the affected APIC and managed switches.
How is the issue exploited?
An authenticated administrator can submit crafted values in specific UI fields associated with export policies. The underlying cause is insufficient access control to file system resources.