CVE-2026-76488

Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability

Published Oct 7, 2026 CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Description

A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.

This vulnerability is due to insufficient access control to file system resources. An attacker could exploit this vulnerability by submitting crafted values in specific UI fields. A successful exploit could allow the attacker to access sensitive files from the underlying file system of an affected device, including key materials that could be used to elevate privileges to root on the affected APIC and on managed switches.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cisco

Cisco Application Policy Infrastructure Controller (APIC)

unknown

Version	Status	Constraints
`5.2(1g)`	affected	—
`5.2(2e)`	affected	—
`5.2(2f)`	affected	—
`5.2(2g)`	affected	—
`5.2(2h)`	affected	—
`5.2(3f)`	affected	—
`5.2(3e)`	affected	—
`5.2(3g)`	affected	—
`5.2(4d)`	affected	—
`5.2(4e)`	affected	—
`5.2(5d)`	affected	—
`5.2(5c)`	affected	—
`6.0(1g)`	affected	—
`5.2(5e)`	affected	—
`5.2(4f)`	affected	—
`5.2(6e)`	affected	—
`6.0(1j)`	affected	—
`5.2(6g)`	affected	—
`5.2(7f)`	affected	—
`5.2(7g)`	affected	—
`6.0(2h)`	affected	—
`5.2(6h)`	affected	—
`5.2(4h)`	affected	—
`5.2(8d)`	affected	—
`6.0(2j)`	affected	—
`5.2(8e)`	affected	—
`6.0(3d)`	affected	—
`6.0(3e)`	affected	—
`5.2(8f)`	affected	—
`5.2(8g)`	affected	—
`5.3(1d)`	affected	—
`5.2(8h)`	affected	—
`6.0(4c)`	affected	—
`5.3(2a)`	affected	—
`5.2(8i)`	affected	—
`6.0(5h)`	affected	—
`5.3(2b)`	affected	—
`6.0(3g)`	affected	—
`6.0(5j)`	affected	—
`5.3(2c)`	affected	—
`6.0(6c)`	affected	—
`6.1(1f)`	affected	—
`6.0(7e)`	affected	—
`5.3(2d)`	affected	—
`6.0(8d)`	affected	—
`6.0(8e)`	affected	—
`6.1(2f)`	affected	—
`6.0(8f)`	affected	—
`5.3(2e)`	affected	—
`6.1(2g)`	affected	—
`5.3(2f)`	affected	—
`6.0(9c)`	affected	—
`6.0(9d)`	affected	—
`6.0(6g)`	affected	—
`6.0(6h)`	affected	—
`6.0(8h)`	affected	—
`6.0(9e)`	affected	—
`6.0(9f)`	affected	—

No data.

Vendor Product Versions

Cisco

Application Policy Infrastructure Controller (apic)

Version	Status	Scheme	Platform
`5.2(1g)`	affected	generic	—
`5.2(2e)`	affected	generic	—
`5.2(2f)`	affected	generic	—
`5.2(2g)`	affected	generic	—
`5.2(2h)`	affected	generic	—
`5.2(3f)`	affected	generic	—
`5.2(3e)`	affected	generic	—
`5.2(3g)`	affected	generic	—
`5.2(4d)`	affected	generic	—
`5.2(4e)`	affected	generic	—
`5.2(5d)`	affected	generic	—
`5.2(5c)`	affected	generic	—
`6.0(1g)`	affected	generic	—
`5.2(5e)`	affected	generic	—
`5.2(4f)`	affected	generic	—
`5.2(6e)`	affected	generic	—
`6.0(1j)`	affected	generic	—
`5.2(6g)`	affected	generic	—
`5.2(7f)`	affected	generic	—
`5.2(7g)`	affected	generic	—
`6.0(2h)`	affected	generic	—
`5.2(6h)`	affected	generic	—
`5.2(4h)`	affected	generic	—
`5.2(8d)`	affected	generic	—
`6.0(2j)`	affected	generic	—
`5.2(8e)`	affected	generic	—
`6.0(3d)`	affected	generic	—
`6.0(3e)`	affected	generic	—
`5.2(8f)`	affected	generic	—
`5.2(8g)`	affected	generic	—
`5.3(1d)`	affected	generic	—
`5.2(8h)`	affected	generic	—
`6.0(4c)`	affected	generic	—
`5.3(2a)`	affected	generic	—
`5.2(8i)`	affected	generic	—
`6.0(5h)`	affected	generic	—
`5.3(2b)`	affected	generic	—
`6.0(3g)`	affected	generic	—
`6.0(5j)`	affected	generic	—
`5.3(2c)`	affected	generic	—
`6.0(6c)`	affected	generic	—
`6.1(1f)`	affected	generic	—
`6.0(7e)`	affected	generic	—
`5.3(2d)`	affected	generic	—
`6.0(8d)`	affected	generic	—
`6.0(8e)`	affected	generic	—
`6.1(2f)`	affected	generic	—
`6.0(8f)`	affected	generic	—
`5.3(2e)`	affected	generic	—
`6.1(2g)`	affected	generic	—
`5.3(2f)`	affected	generic	—
`6.0(9c)`	affected	generic	—
`6.0(9d)`	affected	generic	—
`6.0(6g)`	affected	generic	—
`6.0(6h)`	affected	generic	—
`6.0(8h)`	affected	generic	—
`6.0(9e)`	affected	generic	—
`6.0(9f)`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.286% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-info-priv-enAdB5vD

History

Oct 9, 2026 7:45 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco application Policy Infrastructure Controller (apic)
Vendors & Products		Cisco Cisco application Policy Infrastructure Controller (apic)

Oct 7, 2026 8:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Oct 7, 2026 4:30 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient access control to file system resources. An attacker could exploit this vulnerability by submitting crafted values in specific UI fields. A successful exploit could allow the attacker to access sensitive files from the underlying file system of an affected device, including key materials that could be used to elevate privileges to root on the affected APIC and on managed switches.
Title		Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability
Weaknesses		CWE-264
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-info-priv-enAdB5vD
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N'}`