All vulnerabilities
CVE-2026-76462

Cisco Secure Client Privilege Escalation Vulnerability

Cisco Cisco Secure ClientNetwork & edge
Open in ThreatlineRecord JSON
CVSS
5.5Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.14%Chance of exploitation activity in the next 30 days, higher than 3% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published21 Oct 2026Updated 22 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Vendor and government advisories 1

Vendors that say their products are affected, and agencies that issued alerts. Check each for the fixed release of the product you run.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

Description

A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affected device.

This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a series of crafted IPC messages to a local socket. A successful exploit could allow the attacker to perform limited file write operations on the filesystem with SYSTEM or root privileges. Although this vulnerability affects the Secure Firewall Posture module in Cisco Secure Client on Windows, macOS, and Linux operating systems, this vulnerability could be used to obtain full root privileges on macOS and Linux. For that reason Cisco has assigned this security advisory a Security Impact Rating (SIR) of High rather than Medium as the score indicates.

Text from CVE List

Affected versions 30

  • Cisco Secure Clientaffected: 4.9.00086CVE List
  • Cisco Secure Clientaffected: 4.9.01095CVE List
  • Cisco Secure Clientaffected: 4.9.02028CVE List
  • Cisco Secure Clientaffected: 4.9.03047CVE List
  • Cisco Secure Clientaffected: 4.9.03049CVE List
  • Cisco Secure Clientaffected: 4.9.04043CVE List
  • Cisco Secure Clientaffected: 4.9.04053CVE List
  • Cisco Secure Clientaffected: 4.9.05042CVE List
  • Cisco Secure Clientaffected: 4.9.06037CVE List
  • Cisco Secure Clientaffected: 4.10.00093CVE List
  • Cisco Secure Clientaffected: 4.10.01075CVE List
  • Cisco Secure Clientaffected: 4.10.02086CVE List
  • Cisco Secure Clientaffected: 4.10.03104CVE List
  • Cisco Secure Clientaffected: 4.10.04065CVE List
  • Cisco Secure Clientaffected: 4.10.04071CVE List
  • Cisco Secure Clientaffected: 4.10.05085CVE List
  • Cisco Secure Clientaffected: 4.10.05095CVE List
  • Cisco Secure Clientaffected: 5.0.00238CVE List
  • Cisco Secure Clientaffected: 4.10.05111CVE List
  • Cisco Secure Clientaffected: 5.0.00529CVE List
  • Cisco Secure Clientaffected: 5.0.00556CVE List
  • Cisco Secure Clientaffected: 4.10.06079CVE List
  • Cisco Secure Clientaffected: 5.0.01242CVE List
  • Cisco Secure Clientaffected: 4.10.06090CVE List
  • Cisco Secure Clientaffected: 5.0.02075CVE List
  • Cisco Secure Clientaffected: 4.10.07061CVE List
  • Cisco Secure Clientaffected: 5.0.03072CVE List
  • Cisco Secure Clientaffected: 4.10.07062CVE List
  • Cisco Secure Clientaffected: 5.0.03076CVE List
  • Cisco Secure Clientaffected: 5.0.04032CVE List

References 1