CVE-2026-76488

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller (APIC) (affected versions not specified)

Description Insufficient access control to file system resources within the export policies functionality allows an authenticated remote attacker with administrative credentials to access sensitive files on the underlying file system. This is achieved by submitting crafted values in specific UI fields. A successful exploit could lead to the exposure of key materials, potentially allowing the attacker to elevate privileges to root on the affected APIC and managed switches.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.