PT-2026-21940 · Cisco · Cisco Application Policy Infrastructure Controller

Ash Khamas · Publicado 2026-02-25 · Atualizado 2026-02-28 · CVE-2026-20107

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Application Policy Infrastructure Controller (APIC) (affected versions not specified)

Description A flaw exists in the Object Model CLI component that may allow an authenticated, local attacker to trigger an unexpected reload of the device, leading to a denial of service (DoS). The issue stems from inadequate input validation. An attacker can exploit this by submitting specially crafted commands through the CLI prompt. The attacker must possess valid user credentials and a role with CLI access to succeed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Enumeração de Fraquezas

CWE-1220

Identificadores relacionados

CVE-2026-20107

Produtos afetados

Cisco Application Policy Infrastructure Controller

Referências · 4

• https://t.me/CVEtracker/45739 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-20107 · Nota de Segurança
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-dos-rNus8EFw · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2027744265057546554 · Publicação no Twitter