CVE-2026-76488: Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability

1 karet z 1 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-76488

EPSS 0.00 EPSS k 22. 10. 2026

Hodnocení závažnosti

6.5 CVSS 3.1 cisco

útok odkudkoli z internetu bez přípravy nutná práva správce bez zásahu uživatele
dopad plný únik dat úplná změna dat bez výpadku
přesah dopad jen na zranitelnou součást

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability

A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient access control to file system resources. An attacker could exploit this vulnerability by submitting crafted values in specific UI fields. A successful exploit…

EPSS 0.00 CVE-2026-76488 Cisco US

tg: zranitelnost

· Cisco PSIRT · Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability