Privilege Escalation Vulnerability in Cisco Secure Client's Secure Firewall Posture Module
CVE-2026-76462

5.5MEDIUM

Key Information:

Vendor

Cisco
Status
Cisco Secure Client
Vendor
CVE Published:
21 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-76462?

A vulnerability has been identified in the interprocess communication (IPC) channel of the Secure Firewall Posture module within the Cisco Secure Client. This issue arises from insufficient validation of user-supplied input, allowing authenticated local attackers to elevate their privileges. By sending specially crafted IPC messages to a local socket, attackers can potentially perform limited file write operations on the system with elevated SYSTEM or root privileges. This vulnerability affects the Secure Firewall Posture module on Windows, macOS, and Linux operating systems and poses a significant threat since it could ultimately grant full root access on macOS and Linux systems.

Affected Version(s)

Cisco Secure Client 4.9.00086

Cisco Secure Client 4.9.01095

Cisco Secure Client 4.9.02028

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.