CVE-2014-8027: The RBAC component in Cisco Secure Access Control System (ACS) allows remote authenticated users to obtain...

Security readout for executives and security teams

CVE-2014-8027 is a privilege escalation flaw in Cisco Secure Access Control System. A logged-in remote user could use crafted HTTP requests to gain Network Device Administrator privileges for creating, deleting, reading, and updating network device records. This can affect control over network administration data. Exposure is most likely where Cisco Secure ACS is deployed and authenticated users can reach its administrative web interface. The bundle does not identify affected versions, so teams must verify product status against Cisco’s advisory. Treat this as high priority if Cisco Secure ACS is still in use. The flaw affects administrative control over network device records, but urgency depends on confirmed product exposure and Cisco’s affected-version guidance. Mitigation focus: Check Cisco’s advisory for affected releases, fixed software, and any workarounds.; Restrict ACS administrative interfaces to trusted management networks or VPN access.; Review ACS account roles and remove unnecessary authenticated access..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.