A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated,… (CVE-2026-76488)

CVE-2026-76488 is a medium severity vulnerability in Cisco APIC's export policies feature. It allows an authenticated attacker with administrative privileges to exploit insufficient access controls by submitting crafted values in UI fields, thereby accessing sensitive files on the underlying file system. These files may include key materials that could be leveraged to escalate privileges to root on the APIC and managed switches.

An attacker with valid administrative credentials can access sensitive files, potentially including cryptographic key materials. This access could enable privilege escalation to root on the affected APIC device and managed switches, compromising confidentiality and integrity of the system. There is no indication of availability impact or known active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict administrative access to trusted personnel only and monitor for suspicious activity related to export policies functionality.