CVE-2026-76488: Cisco Application Policy Infrastructure Controller (APIC) 5.2(1g), 5.2(2e), 5.2(2f), 5.2(2g), 5.2(2h), 5.2(3f)…

Affected technology

Cisco Application Policy Infrastructure Controller (APIC) · 5.2(1g), 5.2(2e), 5.2(2f), 5.2(2g), 5.2(2h), 5.2(3f), 5.2(3e), 5.2(3g), 5.2(4d), 5.2(4e), 5.2(5d), 5.2(5c), 6.0(1g), 5.2(5e), 5.2(4f), 5.2(6e), 6.0(1j), 5.2(6g), 5.2(7f), 5.2(7g), 6.0(2h), 5.2(6h), 5.2(4h), 5.2(8d), 6.0(2j), 5.2(8e), 6.0(3d), 6.0(3e), 5.2(8f), 5.2(8g), 5.3(1d), 5.2(8h), 6.0(4c), 5.3(2a), 5.2(8i), 6.0(5h), 5.3(2b), 6.0(3g), 6.0(5j), 5.3(2c), 6.0(6c), 6.1(1f), 6.0(7e), 5.3(2d), 6.0(8d), 6.0(8e), 6.1(2f), 6.0(8f), 5.3(2e), 6.1(2g), 5.3(2f), 6.0(9c), 6.0(9d), 6.0(6g), 6.0(6h), 6.0(8h), 6.0(9e), 6.0(9f)
Cisco

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · High privileges required · No user interaction required

What an attacker can do

An authenticated, remote attacker could access sensitive files on an affected device. Vendor/CNA’s CVSS 3.1 assessment (base score 6.5/10) rates confidentiality and integrity impact as high; availability impact as none.