HackZoneLabs News
Newsletter

CVE-2026-76462

Cisco Secure Client Privilege Escalation Vulnerability

  • Medium 5.5

Description

A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a series of crafted IPC messages to a local socket. A successful exploit could allow the attacker to perform limited file write operations on the filesystem with SYSTEM or root privileges. Although this vulnerability affects the Secure Firewall Posture module in Cisco Secure Client on Windows, macOS, and Linux operating systems, this vulnerability could be used to obtain full root privileges on macOS and Linux. For that reason Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates.

Key facts

Published
21 Oct 2026
Last changed
22 Oct 2026
Assigned by
cisco
EPSS
0.144% likely to be exploited in the next 30 days, higher than 3.732% of CVEs (scores for 15 Nov 2026)
SSVC (CISA)
Exploitation: none; Automatable: no; Technical impact: total

Severity scores

Each score is shown as its source gave it. They are not averaged or merged.

  • 5.5CVSS 3.1, Mediumfrom the CNA (cisco)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Historical context and remediation

This reference retains the original CVE publication date. A recent record update does not mean a new attack occurred.

No separately sourced impact summary is available on this page yet. Consult the description, version data and dated exploitation evidence.

No explicit remediation statement is available on this page yet. Consult the original record and vendor references before choosing a fix.

Version statuses below come from the CNA. An “unaffected” version is not necessarily a currently supported release or proof of a patch date. EPSS is a dated risk estimate, not a count of historical attacks.

Read the original CVE record.

Affected products

VendorProductVersions
CiscoCisco Secure Client
  • Default status: unknown
  • 4.9.00086 (affected)
  • 4.9.01095 (affected)
  • 4.9.02028 (affected)
  • 4.9.03047 (affected)
  • 4.9.03049 (affected)
  • 4.9.04043 (affected)
  • 4.9.04053 (affected)
  • 4.9.05042 (affected)
  • 4.9.06037 (affected)
  • 4.10.00093 (affected)
  • 4.10.01075 (affected)
  • 4.10.02086 (affected)
  • 4.10.03104 (affected)
  • 4.10.04065 (affected)
  • 4.10.04071 (affected)
  • 4.10.05085 (affected)
  • 4.10.05095 (affected)
  • 5.0.00238 (affected)
  • 4.10.05111 (affected)
  • 5.0.00529 (affected)
  • 5.0.00556 (affected)
  • 4.10.06079 (affected)
  • 5.0.01242 (affected)
  • 4.10.06090 (affected)
  • 5.0.02075 (affected)
  • 4.10.07061 (affected)
  • 5.0.03072 (affected)
  • 4.10.07062 (affected)
  • 5.0.03076 (affected)
  • 5.0.04032 (affected)
  • 4.10.07073 (affected)
  • 5.0.05040 (affected)
  • 5.1.0.136 (affected)
  • 5.1.1.42 (affected)
  • 4.10.08025 (affected)
  • 5.1.2.42 (affected)
  • 4.10.08029 (affected)
  • 5.1.3.62 (affected)
  • 5.1.4.74 (affected)
  • 5.1.5.65 (affected)
  • 5.1.6.103 (affected)
  • 5.1.7.80 (affected)
  • 5.1.8.105 (affected)
  • 5.1.8.122 (affected)
  • 5.1.9.113 (affected)
  • 5.1.10.233 (affected)
  • 5.1.11.388 (affected)
  • 5.1.12.146 (affected)
  • 5.1.13.117 (affected)
  • 5.1.13.177 (affected)
  • 5.1.14.145 (affected)
  • 5.1.15.287 (affected)
  • 5.1.16.194 (affected)
  • 5.1.17.3382 (affected)
  • 5.1.17.3394 (affected)
  • 5.1.18.314 (affected)
  • 5.1.19.1862 (affected)

Timeline

  1. 21 Oct 2026 Published

Weakness

Related coverage

References