CVE-2026-20107CWE-1220

Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability

Medium · published February 25, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
0.4
In the wild
Unconfirmed
What it is

A vulnerability in the Object Model CLI component of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. To exploit this vulnerability, the attacker must have valid user credentials and any role that includes CLI access.

This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by issuing crafted commands at the CLI prompt. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00091 · 0.4th percentile
Weakness
CWE-1220 · Insufficient Granularity of Access Control
Published
2026-02-25T16:14Z
EPSS history
Timeline
  • 25 FEB 16:14Z
    Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability
    cvelistv5