A vulnerability exists in Cisco Application Policy Infrastructure Controller (APIC) affecting its export policies functionality. An authenticated, remote attacker can exploit this flaw to gain access to sensitive files. The attacker needs valid administrative credentials to initiate the exploit. The root cause of this vulnerability stems from insufficient access control to file system resources. By submitting crafted values within specific UI fields, an attacker can trigger the vulnerability. Successful exploitation grants access to sensitive files on the underlying file system. Critically, this includes key materials that could facilitate privilege escalation to root. The attacker could achieve root privileges on both the affected APIC and its managed switches. Cisco has already deployed software updates specifically designed to remediate this vulnerability. Unfortunately, there are no available workarounds to mitigate this issue. This vulnerability is identified as CVE-2026-76488. Cisco's security impact rating for this vulnerability is Medium. Further details are available in the link provided in the advisory.