CVE-2026-76462Medium· 5.5▾ SunlitA vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a series of crafted IPC messages to a local socket. A successful exploit could allow the attacker to perform limited file write operations on the filesystem with SYSTEM or root privileges. Although this vulnerability affects the Secure Firewall Posture module in Cisco Secure Client on Windows, macOS, and Linux operating systems, this vulnerability could be used to obtain full root privileges on macOS and Linux. For that reason Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates.
secure_client 4.9.00086secure_client 4.9.01095secure_client 4.9.02028secure_client 4.9.03047secure_client 4.9.03049secure_client 4.9.04043secure_client 4.9.04053secure_client 4.9.05042secure_client 4.9.06037secure_client 4.10.00093secure_client 4.10.01075secure_client 4.10.02086secure_client 4.10.03104secure_client 4.10.04065secure_client 4.10.04071secure_client 4.10.05085secure_client 4.10.05095secure_client 5.0.00238secure_client 4.10.05111secure_client 5.0.00529secure_client 5.0.00556secure_client 4.10.06079secure_client 5.0.01242secure_client 4.10.06090secure_client 5.0.02075secure_client 4.10.07061secure_client 5.0.03072secure_client 4.10.07062secure_client 5.0.03076secure_client 5.0.04032secure_client 4.10.07073secure_client 5.0.05040secure_client 5.1.0.136secure_client 5.1.1.42secure_client 4.10.08025secure_client 5.1.2.42secure_client 4.10.08029secure_client 5.1.3.62secure_client 5.1.4.74secure_client 5.1.5.65secure_client 5.1.6.103secure_client 5.1.7.80secure_client 5.1.8.105secure_client 5.1.8.122secure_client 5.1.9.113secure_client 5.1.10.233secure_client 5.1.11.388secure_client 5.1.12.146secure_client 5.1.13.117secure_client 5.1.13.177Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2020-3478High· 8.1A vulnerability in the REST API of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to overwrite certain files that should be restricted on an affected device
CVE-2020-3577High· 7.4A vulnerability in the ingress packet processing path of Cisco Firepower Threat Defense (FTD) Software for interfaces that are configured either as Inline Pair or in Passive mode could allow an unauthenticated, adjacent attacker to cause…
CVE-2020-3317High· 7.5A vulnerability in the ssl_inspection component of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to crash Snort instances
CVE-2020-3191High· 8.6A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to unexpectedly reloa…
CVE-2020-3166Medium· 6.7A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to read or write arbitrary files on the underlying operating system (OS)
CVE-2019-12694Medium· 6.7A vulnerability in the command line interface (CLI) of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker with administrative privileges to execute commands on the underlying operating system with …